last executing test programs: 13m17.539445725s ago: executing program 1 (id=25): syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000500)=ANY=[], 0x8) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x53, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x1e) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(0xffffffffffffffff, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) socket$inet6(0xa, 0x2, 0x0) 13m15.43142281s ago: executing program 1 (id=27): syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040865}, 0x0) 13m11.945752173s ago: executing program 1 (id=34): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x8d) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x8916, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='zonefs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f0000000400000004000000"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) 13m10.826667153s ago: executing program 1 (id=36): ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f00000001c0)={@id={0x2, 0x0, @c}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)={0x20, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2ee, 0x2d}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x40) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/86, 0x56}], 0x1}, 0x0) 13m6.688783119s ago: executing program 1 (id=43): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x80000001, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) socket(0x2, 0x805, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001a400)=""/102384, 0x18ff0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r5, &(0x7f0000000400)=""/4096, 0xc00) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 13m4.965767229s ago: executing program 1 (id=44): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create1(0x80000) io_setup(0xdda, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x2, r3, 0x0, 0x0, 0x0, 0x0, 0x2}]) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x2016}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000240)={&(0x7f0000000100)}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x2003, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) 12m49.853983734s ago: executing program 32 (id=44): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create1(0x80000) io_setup(0xdda, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x2, r3, 0x0, 0x0, 0x0, 0x0, 0x2}]) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x2016}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000240)={&(0x7f0000000100)}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x2003, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) 7m7.883629421s ago: executing program 5 (id=843): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x1e, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb2, 0x0, 0x0, 0x10, 0x5}, 0x94) read$msr(r0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x42810}, 0x0) 7m7.689682043s ago: executing program 5 (id=844): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x188}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)}, {0x0}, {&(0x7f0000000540)}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151a311e577e1461a24", 0x3b}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67e4f5f7a2", 0x22}], 0x5, 0x4d9e, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000090000000480080002400000000008000140000000000900010000008000000000004c000000060a0104000000000000000001000000240004802000018007000100727400001400028008000240ce31b6cf080001400000000308000b40000000000900010073797a3000e9ffff130000000100010000000000000aeeb9c7da275615ac46ea6889d53c4ae599307c3ebec1699a88c01503d6fa07347deedf1ea28f6f72f6f980cf56d609aa0aa2aba830c53cbb6f3d7823e6d132c066dd4c9ee3ec9c0b34dbefe68fa35363bb4c4fdded806dd29f43897acc350256"], 0xd4}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7m6.403482359s ago: executing program 5 (id=847): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x2, 0x4, 0x0, 0xe}, 0x10) 7m5.315871575s ago: executing program 5 (id=852): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x800000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) prlimit64(0x0, 0xe, 0x0, 0x0) close(0x3) 7m5.026932568s ago: executing program 5 (id=853): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x84, &(0x7f0000000080)={0x20, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0x0, 0x0, 0x0, 0x4}, 0x94) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 7m1.960772334s ago: executing program 5 (id=866): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r3, &(0x7f0000004400), 0x3fffffffffffff2, 0x0, 0x0) 6m47.145449997s ago: executing program 33 (id=866): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r3, &(0x7f0000004400), 0x3fffffffffffff2, 0x0, 0x0) 2m18.806639008s ago: executing program 4 (id=1785): socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4060000000000007111310000000000851000000200000085000000070000009500000000000000950000000000000059a30f4936e44feb8adb9474dd7d10406d8bb1f72366e95281c2c0be09e6af23f926d804488628cda2ad6fe64f"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000580)="4f7393b0249442aa2ce63e5d2754928f30b8b2c42d57c869728d97a074a9bae511027dbf5d0fc980dba2f67684e1cc288a09445c5f73f0e62d47efd13d8c3a37d173d47493b7222bbc55e5", 0x4b}], 0x1}}], 0x1, 0x0) 2m18.486131997s ago: executing program 4 (id=1789): bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) r0 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) openat$kvm(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x44004) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000180)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af36507001ac00400020208000c00ffa1000000000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x400c800) 2m17.335180947s ago: executing program 4 (id=1793): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b826, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040e0}, 0x2880) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000240)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0x9c, 0x6, @random="48802e59d488"}, 0x14) 2m15.186941726s ago: executing program 4 (id=1800): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x188}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000090000000480080002400000000008000140000000000900010000008000000000004c000000060a0104000000000000000001000000240004802000018007000100727400001400028008000240ce31b6cf080001400000000308000b40000000000900010073797a3000e9ffff130000000100010000000000000aeeb9c7da275615ac46ea6889d53c4ae599307c3ebec1699a88c01503d6fa07347deedf1ea28f6f72f6f980cf56d609aa0aa2aba830c53cbb6f3d7823e6d132c066dd4c9ee3ec9c0b34dbefe68fa35363bb4c4fdded806dd29f43897acc35"], 0xd4}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m14.137912496s ago: executing program 4 (id=1802): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x52, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={0x0, 0xc0}}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 2m13.884513687s ago: executing program 4 (id=1804): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x6, 0x4, 0xb, 0x5, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0x1000fff, r0, 0x0, 0xa0028000}, 0x86) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 1m58.839645541s ago: executing program 34 (id=1804): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x6, 0x4, 0xb, 0x5, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0x1000fff, r0, 0x0, 0xa0028000}, 0x86) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 8.345896225s ago: executing program 2 (id=2554): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendto(r0, 0x0, 0x0, 0x20040000, &(0x7f00000000c0)=@un=@abs={0x0, 0x0, 0x4e20}, 0x80) 8.037778466s ago: executing program 2 (id=2556): socket$inet(0x2, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x400, 0x3, 0x8002, 0x5, 0x2, 0xcf60, 0xffff, 0x3}, &(0x7f0000000240)=0x20) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCGIDLE32(r4, 0x8008743f, &(0x7f00000003c0)) 7.922933205s ago: executing program 2 (id=2559): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, 0x0, &(0x7f0000000040)) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000240)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x2d, 0x7fffffff, 0x1008004, 0x71a7, 0xfffb, 0x3800, 0x1d, 0x0, 0x0, 0x4, 0xfc21}}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4004041}, 0x20000000) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000002940)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800}], 0x492492492492515, 0x4054) recvmsg(r4, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x20f2) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x200840d, 0x0) 5.666468383s ago: executing program 7 (id=2575): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000002000240012800b0001006d616373656300001400028005000a00010000000500090001"], 0x44}}, 0x0) 5.570297355s ago: executing program 7 (id=2576): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x1}, {0xffff, 0xffff}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xdc}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) 5.28765341s ago: executing program 7 (id=2579): io_pgetevents(0x0, 0x1, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x4fa, 0x0, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r5, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) dup3(r5, r0, 0x80000) 3.581869815s ago: executing program 6 (id=2584): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff2}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 3.279146677s ago: executing program 6 (id=2588): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0x0, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x7, 0x40, 0x1, 0x0, 0xa}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) 3.001843404s ago: executing program 3 (id=2589): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r0, &(0x7f0000000280)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xf32f, 0xfe000000}, &(0x7f00000000c0)=0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e000000000000002200000009", @ANYRES16=r0, @ANYRES32=r0, @ANYRESHEX=r0], 0x33) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="0008000000000000400034801400350076657468315f766c616e0000000000001400350076657468305f746f5f7465616d00000014003500776c616e3000000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20004010) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'tunl0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000100)={'wg1\x00'}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x6400c095}, 0x8010) socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, 0x0, 0x4008080) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r6, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) 2.885994482s ago: executing program 0 (id=2590): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x1}, {0xffff, 0xffff}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xdc}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) 2.823692899s ago: executing program 6 (id=2591): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x40802, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048810}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x50, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x8, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'batadv0\x00'}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x50}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3a}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000200)="16", 0x1}], 0x1}, 0x80) 2.698179646s ago: executing program 3 (id=2592): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0x0, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0x7, 0x55c, 0x1, 0x7}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x7, 0x40, 0x1, 0x0, 0xa}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) 2.486127995s ago: executing program 0 (id=2593): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r0, &(0x7f0000000280)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xf32f, 0xfe000000}, &(0x7f00000000c0)=0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e000000000000002200000009", @ANYRES16=r0, @ANYRES32=r0, @ANYRESHEX=r0], 0x33) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="0008000000000000400034801400350076657468315f766c616e0000000000001400350076657468305f746f5f7465616d00000014003500776c616e3000000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20004010) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'tunl0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000100)={'wg1\x00'}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x6400c095}, 0x8010) socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, 0x0, 0x4008080) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) 2.449202338s ago: executing program 3 (id=2594): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25d7dbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10, 0x8, 0x8, 0x8, 0x81}, 0x103, 0x0, 0x7, 0x7, 0x7, 0xa, 0x12, 0x7, 0x7, 0x3, {0x3, 0x2, 0x3, 0x35db, 0x2, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40188c0}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x9, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r5, 0xc}, 0x47, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 2.253892551s ago: executing program 6 (id=2595): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40004) 2.157025222s ago: executing program 3 (id=2596): bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) r0 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) openat$kvm(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x44004) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000180)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af36507001ac00400020208000c00ffa1000000000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x400c800) 2.097843091s ago: executing program 7 (id=2597): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r0, &(0x7f0000000280)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e000000000000002200000009", @ANYRES16=r0, @ANYRES32=r0, @ANYRESHEX=r0], 0x33) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r1, 0x0, &(0x7f00000003c0)=""/61}, 0x20) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) connect$ax25(r0, &(0x7f0000000180)={{0x3, @bcast, 0x5}, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) 2.077427696s ago: executing program 0 (id=2598): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x480, @dev={0xac, 0x14, 0x14, 0x37}}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) 1.769204868s ago: executing program 6 (id=2599): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x68}}, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3e8, 0x400, 0x70bd2d, 0x25dfdbfd}, 0x10}}, 0x4000800) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40010}, 0x4000) epoll_create1(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x3fd, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x8, 0x10001, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff43, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x3, 0x8, 0x3, 0x100, 0x2, 0x8, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0x0, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x8000, 0x5, 0x1, 0x6, 0x3, 0x4, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0xb85, 0x9, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x5, 0x6, 0xf, 0xff, 0x11, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x8, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x2, 0xebf, 0x3, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x8, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 984.395978ms ago: executing program 3 (id=2600): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, 0x0, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x52, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 941.705049ms ago: executing program 7 (id=2601): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bf2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x500c0}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 920.423246ms ago: executing program 0 (id=2602): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r2, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 790.197031ms ago: executing program 2 (id=2603): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "74016aff130000fd"}, 0x38) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="e400000000000000000000000700000094040000865400000003051005c3e45b3e088e6f722b0df22b3c00126eacb1ceb7f260dab33486c73af20b59020788c2fdffc9060c47629611bad4427b49310104076002042a03051106b63d39a9a516678325f283800b5d83237b00000000ac1414aaac1414bbe0000002ffffffff00000000ac14142de0000002890327440c7b302e7dc6a00000000807174bac1414aae00000027f0000017f000001ac1e10018317eaac1e0101ac1414aaffffffff64010101e0000001831b0b640101017f00000164010102ffffffffac1414aae0000001000000000014000000000000001a01000001"], 0x100}, 0x0) 701.820394ms ago: executing program 6 (id=2604): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f14000e00003c0ff000000000ff840000000200000003125ce882cbf490d908f1523f000000002d9c2740e260a09c6911cda856d5141bffc6e29a5789796eec81944d7dff184d3319ce9dfb5c1fcd66e67b91a917a67ece64299573503cbc7e27133c4e5ed68c7a9b407a275bcff3432a487ebef21275b91d386164b443c1dfdf63831812", 0x8a}], 0x1}, 0x8bb3a321efc09a) 425.758651ms ago: executing program 0 (id=2605): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0xcb, &(0x7f0000000140)=0x7, 0x4) close(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000200)=0x4) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x74fb01, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc1, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x60000) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x7fffc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xfff2, 0xb}, {0x6, 0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x1, 0x406, 0x4, 0x7fffffff, 0xe}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xe1f0, 0x9, 0xc1c5, 0xfffffffb}}]}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004060}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000000300)={'syzkaller0\x00', @random="2b0100004ec6"}) 341.687765ms ago: executing program 2 (id=2606): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a0001ff"], 0x38}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0) r1 = socket(0x15, 0x5, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) recvmsg(r1, 0x0, 0x104) 170.362832ms ago: executing program 2 (id=2607): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0x0, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0x7, 0x55c, 0x1, 0x7}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x7, 0x40, 0x1, 0x0, 0xa}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) 44.424728ms ago: executing program 7 (id=2608): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r0, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) connect$rose(r0, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) 750.42µs ago: executing program 0 (id=2609): bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x2010842, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x0) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x5, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000180)="259374c94982", 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 3 (id=2610): bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) r0 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) openat$kvm(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x44004) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000180)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af36507001ac00400020208000c00ffa1000000000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x400c800) kernel console output (not intermixed with test programs): g attributes in process `syz.4.186'. [ 178.073629][ T5088] fuse: Bad value for 'fd' [ 179.134593][ T5119] zonefs (nullb0) ERROR: Not a zoned block device [ 181.530155][ T4234] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 182.326039][ T4234] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 182.351143][ T4234] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.370322][ T4234] usb 1-1: config 0 descriptor?? [ 182.416880][ T4234] cp210x 1-1:0.0: cp210x converter detected [ 182.574764][ T5156] loop6: detected capacity change from 0 to 8 [ 182.686563][ T5160] loop_set_status: loop6 () has still dirty pages (nrpages=1) [ 182.720078][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 182.775679][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 182.786920][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 182.799750][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 182.810721][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 183.028086][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 183.039282][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 183.075565][ T4234] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 183.083727][ T4234] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 183.841943][ T4234] usb 1-1: cp210x converter now attached to ttyUSB0 [ 183.899764][ T4234] usb 1-1: USB disconnect, device number 4 [ 183.921818][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 183.932822][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 184.001099][ T4234] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 184.581081][ T4234] cp210x 1-1:0.0: device disconnected [ 184.633483][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 184.644496][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 186.528989][ T5193] device syzkaller1 entered promiscuous mode [ 189.883406][ T5224] sctp: failed to load transform for md5: -2 [ 190.149876][ T5218] bridge0: port 3(gretap0) entered blocking state [ 190.194273][ T5218] bridge0: port 3(gretap0) entered disabled state [ 190.309167][ T5218] device gretap0 entered promiscuous mode [ 190.748844][ T5218] bridge0: port 3(gretap0) entered blocking state [ 190.755754][ T5218] bridge0: port 3(gretap0) entered forwarding state [ 191.725970][ T21] Bluetooth: hci1: command 0x0406 tx timeout [ 191.732159][ T21] Bluetooth: hci4: command 0x0406 tx timeout [ 191.745366][ T4274] Bluetooth: hci2: command 0x0406 tx timeout [ 191.751747][ T4274] Bluetooth: hci3: command 0x0406 tx timeout [ 194.309645][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.316111][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.095300][ T4236] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 201.605417][ T4236] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 201.619698][ T4236] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 201.638444][ T4236] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 201.648145][ T4236] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 201.663945][ T4236] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 203.135442][ T4236] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 203.146576][ T4236] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 203.855095][ T5367] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 203.873067][ T5367] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 204.022913][ T4236] usb 1-1: Product: syz [ 204.044151][ T4236] usb 1-1: Manufacturer: syz [ 204.110904][ T5367] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 204.245043][ T4236] usb 1-1: can't set config #1, error -71 [ 204.294077][ T4236] usb 1-1: USB disconnect, device number 5 [ 205.119387][ T5382] binder: BINDER_SET_CONTEXT_MGR already set [ 205.149236][ T5382] binder: 5380:5382 ioctl 4018620d 2000000002c0 returned -16 [ 209.053110][ T5422] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1420284373 (1420284373 ns) > initial count (164304968 ns). Using initial count to start timer. [ 209.311910][ T5430] binder: 5427:5430 ioctl 4018620d 0 returned -22 [ 210.252756][ T5448] binder: BINDER_SET_CONTEXT_MGR already set [ 210.315125][ T5448] binder: 5446:5448 ioctl 4018620d 2000000002c0 returned -16 [ 213.157325][ T5476] device syzkaller0 entered promiscuous mode [ 214.562793][ T5502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.277'. [ 215.082925][ T5510] binder: BINDER_SET_CONTEXT_MGR already set [ 215.162426][ T5510] binder: 5506:5510 ioctl 4018620d 2000000002c0 returned -16 [ 216.641261][ T5524] sctp: failed to load transform for md5: -2 [ 217.660268][ T5553] binder: BINDER_SET_CONTEXT_MGR already set [ 217.759846][ T5553] binder: 5552:5553 ioctl 4018620d 200000000100 returned -16 [ 218.284817][ T5553] binder: BINDER_SET_CONTEXT_MGR already set [ 218.291358][ T5553] binder: 5552:5553 ioctl 4018620d 2000000002c0 returned -16 [ 221.171871][ T5592] sctp: failed to load transform for md5: -2 [ 222.188287][ T5619] netlink: 68 bytes leftover after parsing attributes in process `syz.2.300'. [ 224.359516][ T5624] binder: BINDER_SET_CONTEXT_MGR already set [ 224.386316][ T5624] binder: 5618:5624 ioctl 4018620d 2000000002c0 returned -16 [ 225.978576][ T5666] sctp: failed to load transform for md5: -2 [ 227.652451][ T5688] netlink: 68 bytes leftover after parsing attributes in process `syz.5.314'. [ 230.651564][ T5730] sctp: failed to load transform for md5: -2 [ 231.965609][ T1335] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 233.012499][ T5766] zonefs (nullb0) ERROR: Not a zoned block device [ 233.490176][ T1335] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 234.140622][ T5773] binder: BINDER_SET_CONTEXT_MGR already set [ 234.179646][ T5773] binder: 5772:5773 ioctl 4018620d 200000000100 returned -16 [ 234.224062][ T1335] usb 4-1: config 0 has no interface number 0 [ 234.242751][ T5773] binder: BINDER_SET_CONTEXT_MGR already set [ 234.292100][ T5773] binder: 5772:5773 ioctl 4018620d 2000000002c0 returned -16 [ 234.505426][ T1335] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 234.535467][ T1335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.602344][ T1335] usb 4-1: config 0 descriptor?? [ 234.631491][ T5779] netlink: 68 bytes leftover after parsing attributes in process `syz.4.329'. [ 234.642365][ T1335] usb 4-1: can't set config #0, error -71 [ 234.656965][ T1335] usb 4-1: USB disconnect, device number 4 [ 234.938151][ T5789] sctp: failed to load transform for md5: -2 [ 238.265391][ T5849] binder: BINDER_SET_CONTEXT_MGR already set [ 238.465506][ T5849] binder: 5848:5849 ioctl 4018620d 200000000100 returned -16 [ 238.498033][ T5851] binder: BINDER_SET_CONTEXT_MGR already set [ 238.504081][ T5851] binder: 5848:5851 ioctl 4018620d 2000000002c0 returned -16 [ 240.417213][ T5882] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.357'. [ 240.995475][ T5891] device syzkaller1 entered promiscuous mode [ 242.475337][ T5325] Bluetooth: hci0: command 0x0406 tx timeout [ 243.011976][ T5909] netlink: 68 bytes leftover after parsing attributes in process `syz.5.364'. [ 244.876182][ T5917] fuse: Bad value for 'fd' [ 245.337474][ T5928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.370'. [ 246.156617][ T5923] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.369'. [ 246.254583][ T5932] binder: BINDER_SET_CONTEXT_MGR already set [ 246.336993][ T5932] binder: 5931:5932 ioctl 4018620d 2000000002c0 returned -16 [ 246.617611][ T5944] binder_alloc: 5939: binder_alloc_buf, no vma [ 248.262728][ T5964] fuse: Bad value for 'fd' [ 250.132160][ T5974] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.384'. [ 250.589904][ T5984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.388'. [ 251.396242][ T5986] binder: BINDER_SET_CONTEXT_MGR already set [ 251.409274][ T5968] syz.3.383 (5968): drop_caches: 2 [ 251.414565][ T5986] binder: 5978:5986 ioctl 4018620d 200000000100 returned -16 [ 251.424216][ T5986] binder: BINDER_SET_CONTEXT_MGR already set [ 251.430517][ T5986] binder: 5978:5986 ioctl 4018620d 2000000002c0 returned -16 [ 254.166572][ T6013] device syzkaller1 entered promiscuous mode [ 254.195094][ T6014] fuse: Bad value for 'fd' [ 254.883478][ T6018] netlink: 'syz.0.398': attribute type 72 has an invalid length. [ 255.551076][ T6023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.400'. [ 255.747801][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.754543][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.776408][ T6049] syz.3.408 (6049): drop_caches: 2 [ 259.967172][ T6050] netlink: 'syz.0.410': attribute type 72 has an invalid length. [ 263.728480][ T6082] device syzkaller1 entered promiscuous mode [ 264.876370][ T6086] syz.5.421 (6086): drop_caches: 2 [ 265.375616][ T6090] netlink: 36 bytes leftover after parsing attributes in process `syz.3.411'. [ 266.948297][ T6125] netlink: 'syz.5.422': attribute type 72 has an invalid length. [ 267.840665][ T6131] syz.5.433 (6131): drop_caches: 2 [ 272.038799][ T6169] netlink: 68 bytes leftover after parsing attributes in process `syz.3.441'. [ 272.380742][ T6171] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.443'. [ 273.338754][ T6172] syz.0.444 (6172): drop_caches: 2 [ 277.732149][ T6224] netlink: 68 bytes leftover after parsing attributes in process `syz.4.456'. [ 279.236737][ T6222] syz.0.457 (6222): drop_caches: 2 [ 279.547574][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.459'. [ 281.733820][ T6250] binder: BINDER_SET_CONTEXT_MGR already set [ 281.769612][ T6250] binder: 6247:6250 ioctl 4018620d 200000000100 returned -16 [ 281.784799][ T6253] binder: BINDER_SET_CONTEXT_MGR already set [ 281.842605][ T6253] binder: 6247:6253 ioctl 4018620d 2000000002c0 returned -16 [ 282.969156][ T6265] netlink: 68 bytes leftover after parsing attributes in process `syz.4.469'. [ 283.565340][ T6266] program syz.2.470 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 284.586146][ T6276] device syzkaller1 entered promiscuous mode [ 285.830000][ T6269] syz.4.471 (6269): drop_caches: 2 [ 286.222857][ T6286] device syzkaller0 entered promiscuous mode [ 287.436125][ T6296] binder: BINDER_SET_CONTEXT_MGR already set [ 287.442167][ T6296] binder: 6295:6296 ioctl 4018620d 200000000100 returned -16 [ 287.733762][ T6306] netlink: 68 bytes leftover after parsing attributes in process `syz.0.481'. [ 290.432207][ T6314] program syz.2.482 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 291.066360][ T6321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.484'. [ 291.952345][ T6332] device syzkaller0 entered promiscuous mode [ 294.226593][ T6350] netlink: 68 bytes leftover after parsing attributes in process `syz.4.493'. [ 295.074693][ T6355] binder: BINDER_SET_CONTEXT_MGR already set [ 295.104565][ T6355] binder: 6353:6355 ioctl 4018620d 200000000100 returned -16 [ 295.424903][ T6358] sctp: failed to load transform for md5: -2 [ 295.451953][ T6355] binder: BINDER_SET_CONTEXT_MGR already set [ 295.477281][ T6355] binder: 6353:6355 ioctl 4018620d 2000000002c0 returned -16 [ 298.312891][ T6387] device syzkaller0 entered promiscuous mode [ 298.521275][ T6396] netlink: 68 bytes leftover after parsing attributes in process `syz.5.505'. [ 301.768500][ T6417] binder: BINDER_SET_CONTEXT_MGR already set [ 301.774562][ T6417] binder: 6416:6417 ioctl 4018620d 200000000100 returned -16 [ 301.967283][ T6419] sctp: failed to load transform for md5: -2 [ 302.059492][ T6417] binder: BINDER_SET_CONTEXT_MGR already set [ 302.133852][ T6417] binder: 6416:6417 ioctl 4018620d 2000000002c0 returned -16 [ 302.769861][ T6435] device syzkaller1 entered promiscuous mode [ 304.406339][ T6449] netlink: 68 bytes leftover after parsing attributes in process `syz.2.516'. [ 305.135248][ T4238] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 307.849073][ T6463] binder: BINDER_SET_CONTEXT_MGR already set [ 307.875273][ T6463] binder: 6462:6463 ioctl 4018620d 200000000100 returned -16 [ 308.183571][ T6463] binder: BINDER_SET_CONTEXT_MGR already set [ 308.290894][ T6463] binder: 6462:6463 ioctl 4018620d 2000000002c0 returned -16 [ 308.676823][ T6471] sctp: failed to load transform for md5: -2 [ 309.279665][ T6488] netlink: 36 bytes leftover after parsing attributes in process `syz.5.525'. [ 310.479449][ T6500] device syzkaller0 entered promiscuous mode [ 311.196643][ T6510] netlink: 68 bytes leftover after parsing attributes in process `syz.4.529'. [ 313.895584][ T6526] binder: BINDER_SET_CONTEXT_MGR already set [ 314.289319][ T6526] binder: 6525:6526 ioctl 4018620d 2000000002c0 returned -16 [ 315.010298][ T6540] device syzkaller0 entered promiscuous mode [ 315.305253][ T6145] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 315.605253][ T6145] usb 5-1: Using ep0 maxpacket: 16 [ 315.735379][ T6145] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.861222][ T6145] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.893375][ T6145] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 315.916641][ T6145] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.953528][ T6552] netlink: 68 bytes leftover after parsing attributes in process `syz.0.543'. [ 316.875410][ T6145] usb 5-1: can't set config #128, error -71 [ 318.273024][ T6145] usb 5-1: USB disconnect, device number 3 [ 318.276299][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.289941][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.549227][ T6572] binder: BINDER_SET_CONTEXT_MGR already set [ 320.585219][ T6572] binder: 6571:6572 ioctl 4018620d 2000000002c0 returned -16 [ 320.891423][ T6580] device syzkaller0 entered promiscuous mode [ 321.706309][ T6586] netlink: 68 bytes leftover after parsing attributes in process `syz.5.554'. [ 325.857516][ T6603] netlink: 168 bytes leftover after parsing attributes in process `syz.0.546'. [ 327.578440][ T6614] binder: BINDER_SET_CONTEXT_MGR already set [ 327.605002][ T6614] binder: 6613:6614 ioctl 4018620d 200000000100 returned -16 [ 327.632037][ T6615] binder: BINDER_SET_CONTEXT_MGR already set [ 327.658579][ T6615] binder: 6613:6615 ioctl 4018620d 2000000002c0 returned -16 [ 327.842479][ T6618] device syzkaller0 entered promiscuous mode [ 329.675514][ T6623] netlink: 68 bytes leftover after parsing attributes in process `syz.3.566'. [ 330.696598][ T6629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.567'. [ 331.856329][ T6636] sch_tbf: peakrate 6762417878432097402 is lower than or equals to rate 8022975959529529383 ! [ 335.048161][ T6654] netlink: 168 bytes leftover after parsing attributes in process `syz.4.573'. [ 336.679599][ T6669] device syzkaller0 entered promiscuous mode [ 339.492080][ T6693] netlink: 68 bytes leftover after parsing attributes in process `syz.4.582'. [ 341.443949][ T6713] netlink: 168 bytes leftover after parsing attributes in process `syz.0.588'. [ 342.468895][ T6723] overlayfs: failed to resolve './file1': -2 [ 344.792113][ T6733] device syzkaller1 entered promiscuous mode [ 344.888474][ T6734] device syzkaller0 entered promiscuous mode [ 347.906160][ T6750] netlink: 68 bytes leftover after parsing attributes in process `syz.2.595'. [ 350.727437][ T6762] syz.0.601 (6762) used greatest stack depth: 20728 bytes left [ 350.742165][ T6770] overlayfs: failed to resolve './file1': -2 [ 353.716757][ T6788] netlink: 68 bytes leftover after parsing attributes in process `syz.5.608'. [ 353.727125][ T6788] netlink: 124 bytes leftover after parsing attributes in process `syz.5.608'. [ 354.237307][ T6789] device syzkaller1 entered promiscuous mode [ 354.549578][ T6792] binder: BINDER_SET_CONTEXT_MGR already set [ 354.585408][ T6792] binder: 6791:6792 ioctl 4018620d 200000000100 returned -16 [ 354.678081][ T6792] binder: BINDER_SET_CONTEXT_MGR already set [ 354.684131][ T6792] binder: 6791:6792 ioctl 4018620d 2000000002c0 returned -16 [ 357.191902][ T6835] netlink: 68 bytes leftover after parsing attributes in process `syz.3.620'. [ 357.206453][ T6835] netlink: 124 bytes leftover after parsing attributes in process `syz.3.620'. [ 359.119361][ T6850] device syzkaller1 entered promiscuous mode [ 359.895269][ T4274] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 360.262563][ T4274] usb 3-1: Using ep0 maxpacket: 8 [ 360.385446][ T4274] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 360.393713][ T4274] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 361.415647][ T4274] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 361.439325][ T4274] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 361.470222][ T4274] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 361.527707][ T4274] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 361.555978][ T4274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.905387][ T4274] usb 3-1: usb_control_msg returned -71 [ 361.914301][ T4274] usbtmc 3-1:16.0: can't read capabilities [ 362.076329][ T4274] usb 3-1: USB disconnect, device number 2 [ 362.836492][ T6875] binder: BINDER_SET_CONTEXT_MGR already set [ 362.866342][ T6875] binder: 6874:6875 ioctl 4018620d 200000000100 returned -16 [ 362.944361][ T6875] binder: BINDER_SET_CONTEXT_MGR already set [ 362.991440][ T6875] binder: 6874:6875 ioctl 4018620d 200000004a80 returned -16 [ 363.600792][ T6890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.638'. [ 363.904951][ T6887] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 363.914073][ T6887] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 365.604446][ T6900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.641'. [ 368.572915][ T6145] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 369.552655][ T6145] usb 4-1: Using ep0 maxpacket: 16 [ 369.915325][ T6145] usb 4-1: device descriptor read/all, error -71 [ 372.508210][ T6936] fuse: Bad value for 'fd' [ 375.305328][ T4232] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 375.545324][ T4232] usb 4-1: Using ep0 maxpacket: 16 [ 375.665610][ T4232] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.834320][ T4232] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.972772][ T4232] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 376.238155][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.638848][ T6967] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.858691][ T6978] program syz.4.659 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 377.078051][ T4232] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 377.224000][ T4232] usb 4-1: USB disconnect, device number 8 [ 377.366768][ T6967] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.582269][ T6967] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.327223][ T6967] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.633121][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.646474][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.018806][ T6967] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.359489][ T6967] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.415550][ T6967] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.441153][ T6967] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.586115][ T7005] device syzkaller0 entered promiscuous mode [ 384.196001][ T7019] binder: BINDER_SET_CONTEXT_MGR already set [ 384.202112][ T7019] binder: 7017:7019 ioctl 4018620d 200000000100 returned -16 [ 384.327330][ T7019] binder: BINDER_SET_CONTEXT_MGR already set [ 384.333402][ T7019] binder: 7017:7019 ioctl 4018620d 2000000002c0 returned -16 [ 384.775342][ T6145] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 385.055468][ T6145] usb 5-1: Using ep0 maxpacket: 16 [ 385.616266][ T6145] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.641309][ T6145] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.661992][ T6145] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 385.682291][ T6145] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.706587][ T7048] binder: BINDER_SET_CONTEXT_MGR already set [ 386.788722][ T6145] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 386.816311][ T7048] binder: 7046:7048 ioctl 4018620d 200000000100 returned -16 [ 386.833055][ T7050] device syzkaller0 entered promiscuous mode [ 386.852204][ T7048] loop2: detected capacity change from 0 to 7 [ 386.888553][ T7055] binder: BINDER_SET_CONTEXT_MGR already set [ 386.894608][ T7055] binder: 7053:7055 ioctl 4018620d 2000000002c0 returned -16 [ 386.920842][ T7048] Dev loop2: unable to read RDB block 7 [ 386.927123][ T7048] loop2: AHDI p1 p2 p3 [ 386.931443][ T7048] loop2: partition table partially beyond EOD, truncated [ 386.940170][ T7048] loop2: p1 start 1601398130 is beyond EOD, truncated [ 386.947125][ T7048] loop2: p2 start 1702059890 is beyond EOD, truncated [ 386.957281][ T7048] binder: BINDER_SET_CONTEXT_MGR already set [ 386.963555][ T7048] binder: 7046:7048 ioctl 4018620d 200000004a80 returned -16 [ 387.215278][ T6145] usb 5-1: USB disconnect, device number 4 [ 387.911583][ T7058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.688'. [ 390.529812][ T7094] binder: BINDER_SET_CONTEXT_MGR already set [ 390.552590][ T7094] binder: 7091:7094 ioctl 4018620d 200000000100 returned -16 [ 390.569591][ T7094] binder: BINDER_SET_CONTEXT_MGR already set [ 390.576871][ T7094] binder: 7091:7094 ioctl 4018620d 2000000002c0 returned -16 [ 390.940453][ T7096] device syzkaller1 entered promiscuous mode [ 391.971771][ T7107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.703'. [ 393.054960][ T23] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 393.355890][ T4274] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 393.597689][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 393.609715][ T23] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 394.495308][ T4274] usb 3-1: Using ep0 maxpacket: 16 [ 394.616162][ T4274] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.630009][ T4274] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.690958][ T4274] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 394.705285][ T23] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 394.715871][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 394.724279][ T23] usb 4-1: Product: syz [ 394.734778][ T23] usb 4-1: Manufacturer: syz [ 394.742962][ T4274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.754477][ T23] usb 4-1: SerialNumber: syz [ 395.145501][ T23] usb 4-1: USB disconnect, device number 9 [ 395.576517][ T4274] mcp2221 0003:04D8:00DD.0003: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 396.365368][ T4274] usb 3-1: USB disconnect, device number 3 [ 397.280171][ T7154] binder: BINDER_SET_CONTEXT_MGR already set [ 397.286497][ T7154] binder: 7152:7154 ioctl 4018620d 200000000100 returned -16 [ 397.509962][ T7154] binder: BINDER_SET_CONTEXT_MGR already set [ 397.525569][ T7154] binder: 7152:7154 ioctl 4018620d 2000000002c0 returned -16 [ 399.435312][ T7176] netlink: 68 bytes leftover after parsing attributes in process `syz.2.720'. [ 402.596503][ T7204] syz.2.726 (7204): drop_caches: 2 [ 404.613029][ T7217] netlink: 'syz.3.731': attribute type 4 has an invalid length. [ 404.673982][ T7217] netlink: 152 bytes leftover after parsing attributes in process `syz.3.731'. [ 404.851104][ T7217] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 404.856519][ T4274] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 405.145323][ T4274] usb 5-1: Using ep0 maxpacket: 16 [ 405.265768][ T4274] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.109940][ T7217] syz.3.731 (7217) used greatest stack depth: 20624 bytes left [ 406.115431][ T4274] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.259916][ T4274] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 406.453893][ T4274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.287498][ T4274] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 407.514418][ T4274] usb 5-1: USB disconnect, device number 5 [ 407.535253][ T4238] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 407.915439][ T4238] usb 1-1: config 0 has no interfaces? [ 407.995901][ T4238] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 408.044766][ T4238] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 408.063331][ T4238] usb 1-1: Manufacturer: syz [ 408.145983][ T4238] usb 1-1: config 0 descriptor?? [ 408.174161][ T7236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.736'. [ 408.741235][ T4274] usb 1-1: USB disconnect, device number 6 [ 412.114344][ T7263] syz.0.739 (7263): drop_caches: 2 [ 420.770512][ T7306] syz.4.755 (7306): drop_caches: 2 [ 423.467516][ T4238] Bluetooth: hci0: command 0x0c1a tx timeout [ 424.080630][ T7343] lo speed is unknown, defaulting to 1000 [ 424.087221][ T7343] lo speed is unknown, defaulting to 1000 [ 424.104412][ T7343] lo speed is unknown, defaulting to 1000 [ 424.136363][ T7343] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 424.180650][ T7343] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 424.456828][ T7343] lo speed is unknown, defaulting to 1000 [ 424.464435][ T7343] lo speed is unknown, defaulting to 1000 [ 424.471899][ T7343] lo speed is unknown, defaulting to 1000 [ 424.478706][ T7343] lo speed is unknown, defaulting to 1000 [ 424.487383][ T7343] lo speed is unknown, defaulting to 1000 [ 425.507966][ T6145] Bluetooth: hci0: command 0x0406 tx timeout [ 429.514521][ T7374] netlink: 168 bytes leftover after parsing attributes in process `syz.3.777'. [ 433.125258][ T5325] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 434.625356][ T5325] usb 5-1: Using ep0 maxpacket: 16 [ 435.185398][ T5325] usb 5-1: device descriptor read/all, error -71 [ 438.591026][ T7434] binder: BINDER_SET_CONTEXT_MGR already set [ 438.622478][ T7434] binder: 7432:7434 ioctl 4018620d 200000000100 returned -16 [ 438.692003][ T7434] binder: BINDER_SET_CONTEXT_MGR already set [ 438.825425][ T7434] binder: 7432:7434 ioctl 4018620d 2000000002c0 returned -16 [ 439.045280][ T5325] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 439.495578][ T5325] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 24929, setting to 1024 [ 439.681788][ T5325] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 439.722835][ T5325] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 440.069026][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.075841][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.815407][ T5325] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 440.824560][ T5325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 440.840986][ T5325] usb 3-1: Product: syz [ 440.845401][ T5325] usb 3-1: Manufacturer: syz [ 440.850277][ T5325] usb 3-1: SerialNumber: syz [ 440.944200][ T4233] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 440.953912][ T7440] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 441.585348][ T4233] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 441.593624][ T4233] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.603865][ T4233] usb 4-1: config 0 has no interface number 0 [ 441.611622][ T4233] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 441.622409][ T4233] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 442.564635][ T4233] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 442.625542][ T4233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.635177][ T4233] usb 4-1: Product: syz [ 442.645655][ T4233] usb 4-1: Manufacturer: syz [ 442.655325][ T4233] usb 4-1: SerialNumber: syz [ 442.701813][ T4233] usb 4-1: config 0 descriptor?? [ 443.425389][ T4233] usbtouchscreen: probe of 4-1:0.117 failed with error -71 [ 443.439548][ T4233] usb 4-1: USB disconnect, device number 10 [ 443.499149][ T5325] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 443.559305][ T5325] usb 3-1: USB disconnect, device number 4 [ 443.591989][ T5325] usblp0: removed [ 443.746222][ T7467] device syzkaller1 entered promiscuous mode [ 444.285402][ T7474] netlink: 4 bytes leftover after parsing attributes in process `syz.5.805'. [ 448.424576][ T7504] device syzkaller0 entered promiscuous mode [ 450.154223][ T7522] device syzkaller1 entered promiscuous mode [ 450.625778][ T7529] netlink: 68 bytes leftover after parsing attributes in process `syz.2.808'. [ 454.444694][ T7559] device syzkaller0 entered promiscuous mode [ 455.408330][ T7571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.833'. [ 455.555373][ T1335] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 455.825407][ T1335] usb 6-1: Using ep0 maxpacket: 32 [ 455.965876][ T1335] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 456.112216][ T7576] binder: BINDER_SET_CONTEXT_MGR already set [ 456.134296][ T7576] binder: 7575:7576 ioctl 4018620d 200000000100 returned -16 [ 456.174007][ T7576] binder: BINDER_SET_CONTEXT_MGR already set [ 456.190917][ T1335] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 456.251289][ T1335] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 456.275505][ T7576] binder: 7575:7576 ioctl 4018620d 2000000002c0 returned -16 [ 456.321994][ T1335] usb 6-1: Product: syz [ 456.343973][ T1335] usb 6-1: Manufacturer: syz [ 456.375206][ T1335] usb 6-1: SerialNumber: syz [ 456.606442][ T1335] usb 6-1: config 0 descriptor?? [ 456.625723][ T7568] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 456.656704][ T7587] device syzkaller1 entered promiscuous mode [ 457.419076][ T1335] usb 6-1: USB disconnect, device number 2 [ 459.178193][ T7599] syz.0.841 (7599): drop_caches: 2 [ 460.119244][ T7616] netlink: 68 bytes leftover after parsing attributes in process `syz.3.846'. [ 460.994066][ T7618] device syzkaller0 entered promiscuous mode [ 461.075207][ T7621] netlink: 8 bytes leftover after parsing attributes in process `syz.5.847'. [ 461.400737][ T7625] binder: BINDER_SET_CONTEXT_MGR already set [ 461.434736][ T7625] binder: 7624:7625 ioctl 4018620d 200000000100 returned -16 [ 461.492466][ T7625] binder: BINDER_SET_CONTEXT_MGR already set [ 461.530081][ T7625] binder: 7624:7625 ioctl 4018620d 2000000002c0 returned -16 [ 461.874964][ T7630] binder: BINDER_SET_CONTEXT_MGR already set [ 461.881149][ T7630] binder: 7629:7630 ioctl 4018620d 200000000100 returned -16 [ 461.892509][ T7630] binder: BINDER_SET_CONTEXT_MGR already set [ 461.899739][ T7630] binder: 7629:7630 ioctl 4018620d 2000000002c0 returned -16 [ 462.133168][ T1335] kernel write not supported for file /input/event2 (pid: 1335 comm: kworker/0:3) [ 462.691942][ T4236] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 462.845195][ T21] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 463.055313][ T4236] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 463.070308][ T4236] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.095178][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 463.165512][ T4236] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 463.181072][ T4236] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 463.215262][ T21] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 463.241028][ T4236] usb 6-1: Manufacturer: syz [ 463.250021][ T7657] binder: BINDER_SET_CONTEXT_MGR already set [ 463.277366][ T4236] usb 6-1: config 0 descriptor?? [ 463.290197][ T7657] binder: 7656:7657 ioctl 4018620d 200000000100 returned -16 [ 463.302549][ T7657] binder: BINDER_SET_CONTEXT_MGR already set [ 463.316911][ T7657] binder: 7656:7657 ioctl 4018620d 2000000002c0 returned -16 [ 463.405383][ T21] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 463.429646][ T21] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 463.453106][ T21] usb 5-1: Product: syz [ 463.462054][ T21] usb 5-1: Manufacturer: syz [ 463.470047][ T21] usb 5-1: SerialNumber: syz [ 463.491203][ T21] usb 5-1: config 0 descriptor?? [ 463.505667][ T4236] rc_core: IR keymap rc-hauppauge not found [ 463.512257][ T4236] Registered IR keymap rc-empty [ 463.518210][ T7641] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 463.543990][ T4236] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 463.572819][ T4236] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input6 [ 464.395271][ T4238] usb 6-1: USB disconnect, device number 3 [ 464.402078][ T5325] usb 5-1: USB disconnect, device number 8 [ 468.166262][ T4274] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 468.925235][ T4274] usb 3-1: Using ep0 maxpacket: 32 [ 469.055444][ T4274] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 469.275865][ T4274] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 469.295246][ T4274] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 469.304576][ T4274] usb 3-1: Product: syz [ 469.309379][ T4274] usb 3-1: Manufacturer: syz [ 469.315154][ T4274] usb 3-1: SerialNumber: syz [ 469.348842][ T4274] usb 3-1: config 0 descriptor?? [ 469.377169][ T7712] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 470.935195][ C1] hrtimer: interrupt took 69439 ns [ 471.997847][ T7] usb 3-1: USB disconnect, device number 5 [ 472.031619][ T7746] device syzkaller1 entered promiscuous mode [ 472.895981][ T7759] netlink: 168 bytes leftover after parsing attributes in process `syz.3.890'. [ 475.495481][ T7781] netlink: 68 bytes leftover after parsing attributes in process `syz.3.896'. [ 477.940903][ T7795] device syzkaller0 entered promiscuous mode [ 481.665297][ T13] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 481.715285][ T7] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 481.935306][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 482.056081][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.105699][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.208503][ T13] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 482.223754][ T7] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 482.345349][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.367175][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 482.503329][ T7] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 482.519559][ T13] usb 1-1: config 0 descriptor?? [ 482.826979][ T7] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 482.836513][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.844556][ T7] usb 4-1: Product: syz [ 482.849425][ T7] usb 4-1: Manufacturer: syz [ 482.854075][ T7] usb 4-1: SerialNumber: syz [ 482.869886][ T7] usb 4-1: config 0 descriptor?? [ 483.064570][ T7] garmin_gps 4-1:0.0: Garmin GPS usb/tty converter detected [ 483.089525][ T7] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 483.114220][ T7] garmin_gps: probe of ttyUSB0 failed with error -8 [ 483.122650][ T7830] lo speed is unknown, defaulting to 1000 [ 483.129156][ T13] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 484.056090][ T7824] udc-core: couldn't find an available UDC or it's busy [ 484.063097][ T7824] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 484.086405][ T7] usb 4-1: USB disconnect, device number 11 [ 484.098250][ T7] garmin_gps 4-1:0.0: device disconnected [ 484.293199][ T4236] usb 1-1: USB disconnect, device number 7 [ 484.657077][ T7830] chnl_net:caif_netlink_parms(): no params data found [ 484.871167][ T4232] Bluetooth: hci5: command 0x0409 tx timeout [ 484.968631][ T4499] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.023055][ T7830] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.040600][ T7830] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.062209][ T7830] device bridge_slave_0 entered promiscuous mode [ 485.107512][ T7830] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.135992][ T7830] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.146641][ T7830] device bridge_slave_1 entered promiscuous mode [ 485.223437][ T7830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.299939][ T4499] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.377589][ T7830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.676852][ T4499] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.804303][ T7830] team0: Port device team_slave_0 added [ 485.850046][ T4499] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.935263][ T7830] team0: Port device team_slave_1 added [ 485.958623][ T7830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.965895][ T7830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.002285][ T7830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.107080][ T7830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.114111][ T7830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.199956][ T7863] binder: BINDER_SET_CONTEXT_MGR already set [ 486.219781][ T7863] binder: 7862:7863 ioctl 4018620d 200000000100 returned -16 [ 486.238856][ T7830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.274324][ T7863] binder: BINDER_SET_CONTEXT_MGR already set [ 486.324634][ T7863] binder: 7862:7863 ioctl 4018620d 2000000002c0 returned -16 [ 486.431286][ T7830] device hsr_slave_0 entered promiscuous mode [ 486.472290][ T7830] device hsr_slave_1 entered promiscuous mode [ 486.534539][ T7830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 486.576103][ T7830] Cannot create hsr debugfs directory [ 487.171358][ T13] Bluetooth: hci5: command 0x041b tx timeout [ 488.998980][ T7879] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 489.274869][ T6145] Bluetooth: hci5: command 0x040f tx timeout [ 489.719181][ T7830] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 489.789685][ T7830] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 489.882559][ T7830] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 490.069192][ T7830] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 491.265251][ T7914] netlink: 68 bytes leftover after parsing attributes in process `syz.0.932'. [ 492.155347][ T4237] Bluetooth: hci5: command 0x0419 tx timeout [ 493.907979][ T4499] device hsr_slave_0 left promiscuous mode [ 493.939678][ T4499] device hsr_slave_1 left promiscuous mode [ 494.011030][ T4499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.040481][ T4499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.683288][ T4499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.729018][ T4499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.822912][ T4499] device bridge_slave_1 left promiscuous mode [ 494.875642][ T4499] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.923541][ T4499] device bridge_slave_0 left promiscuous mode [ 495.012224][ T4499] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.405863][ T4499] device veth1_macvtap left promiscuous mode [ 495.413776][ T4499] device veth0_macvtap left promiscuous mode [ 495.432192][ T4499] device veth1_vlan left promiscuous mode [ 495.461202][ T4499] device veth0_vlan left promiscuous mode [ 495.861938][ T7960] netlink: 68 bytes leftover after parsing attributes in process `syz.0.942'. [ 498.326128][ T7974] syz.3.945 (7974): drop_caches: 2 [ 499.109478][ T7978] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 499.179994][ T7978] IPVS: lc: FWM 3 0x00000003 - no destination available [ 500.736100][ T4499] team0 (unregistering): Port device team_slave_1 removed [ 501.005799][ T4499] team0 (unregistering): Port device team_slave_0 removed [ 501.082675][ T4499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.508738][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.515175][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.098980][ T4499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 504.160371][ T4499] bond0 (unregistering): Released all slaves [ 505.871917][ T7830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.956899][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 505.973014][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 506.017252][ T7830] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.196829][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 506.215712][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 506.243360][ T4306] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.250529][ T4306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.272702][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 506.309607][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 506.965520][ T4306] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.972656][ T4306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.032938][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 507.096960][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 507.146596][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 507.218541][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 507.269762][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 507.320705][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 507.357231][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 507.416192][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 507.479038][ T7830] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 507.546277][ T7830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 507.590649][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 507.618422][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 507.632089][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 507.642612][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 507.657688][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 508.368734][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 508.389877][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 508.458610][ T7830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.983082][ T8070] binder: BINDER_SET_CONTEXT_MGR already set [ 509.017697][ T8070] binder: 8069:8070 ioctl 4018620d 200000000100 returned -16 [ 509.067695][ T8070] binder: BINDER_SET_CONTEXT_MGR already set [ 509.097358][ T8070] binder: 8069:8070 ioctl 4018620d 2000000002c0 returned -16 [ 509.963141][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 509.990766][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 510.691376][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 510.724323][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 510.796991][ T7830] device veth0_vlan entered promiscuous mode [ 510.860536][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 510.909415][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 511.077740][ T7830] device veth1_vlan entered promiscuous mode [ 511.675453][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 511.685513][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 511.782717][ T7830] device veth0_macvtap entered promiscuous mode [ 511.847088][ T7830] device veth1_macvtap entered promiscuous mode [ 511.931570][ T7830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.962627][ T7830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.015166][ T7830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.083690][ T7830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.102312][ T8108] netlink: 28 bytes leftover after parsing attributes in process `syz.4.972'. [ 512.135693][ T7830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.207738][ T7830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.261165][ T8108] Can't find ip_set type bitmap:por [ 512.312167][ T7830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.392326][ T7830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.483471][ T7830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 512.538915][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 512.645894][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 512.888973][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 513.343237][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 513.369508][ T7830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.392006][ T7830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.403959][ T7830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.414791][ T7830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.425633][ T7830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.436462][ T7830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.448239][ T7830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.459416][ T7830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.477692][ T7830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.490822][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 513.529555][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 513.612563][ T7830] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.622199][ T7830] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.631199][ T7830] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.645739][ T7830] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.974197][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.013572][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.639214][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 514.754212][ T4304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.774770][ T4304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.817422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 515.062105][ T8141] netlink: 168 bytes leftover after parsing attributes in process `syz.6.906'. [ 522.025136][ T5325] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 522.275116][ T5325] usb 4-1: Using ep0 maxpacket: 8 [ 522.391068][ T8205] tipc: Started in network mode [ 522.396218][ T5325] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 522.541947][ T8205] tipc: Node identity 26d5d58750a7, cluster identity 4711 [ 522.555522][ T5325] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 522.564636][ T5325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.621181][ T8205] tipc: Enabled bearer , priority 0 [ 522.639915][ T5325] usb 4-1: Product: syz [ 522.663132][ T5325] usb 4-1: Manufacturer: syz [ 522.694167][ T8207] device syzkaller0 entered promiscuous mode [ 522.719785][ T5325] usb 4-1: SerialNumber: syz [ 522.743286][ T5325] usb 4-1: config 0 descriptor?? [ 523.097453][ T5325] msi2500 4-1:0.0: Registered as swradio24 [ 523.103440][ T5325] msi2500 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 523.233244][ T8228] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 523.238818][ T5325] usb 4-1: USB disconnect, device number 12 [ 523.309294][ T8228] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 523.347123][ T8204] tipc: Resetting bearer [ 523.627199][ T8204] tipc: Disabling bearer [ 523.764240][ T23] tipc: Node number set to 1987237255 [ 523.965417][ T8256] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1007'. [ 526.246792][ T8269] lo speed is unknown, defaulting to 1000 [ 526.535313][ T5325] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 526.795217][ T5325] usb 4-1: Using ep0 maxpacket: 8 [ 526.955538][ T5325] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 528.526019][ T5325] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 528.599788][ T5325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.718845][ T5325] usb 4-1: Product: syz [ 528.781428][ T5325] usb 4-1: Manufacturer: syz [ 528.829672][ T5325] usb 4-1: SerialNumber: syz [ 529.007314][ T5325] usb 4-1: config 0 descriptor?? [ 529.935518][ T5325] msi2500 4-1:0.0: Registered as swradio24 [ 529.941499][ T5325] msi2500 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 530.017792][ T8307] fuse: Bad value for 'fd' [ 530.033825][ T5325] usb 4-1: USB disconnect, device number 13 [ 532.632250][ T8353] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 532.682506][ T8353] device syzkaller0 entered promiscuous mode [ 532.835186][ T4238] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 533.207099][ T8363] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1032'. [ 533.242051][ T8363] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1032'. [ 533.415273][ T4238] usb 3-1: Using ep0 maxpacket: 8 [ 533.543723][ T4238] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 535.836864][ T8372] fuse: Bad value for 'fd' [ 535.869598][ T4238] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 535.894837][ T4238] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.047025][ T4238] usb 3-1: Product: syz [ 536.119201][ T4238] usb 3-1: config 0 descriptor?? [ 536.193961][ T4238] usb 3-1: can't set config #0, error -71 [ 536.324377][ T4238] usb 3-1: USB disconnect, device number 6 [ 539.293050][ T8420] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1046'. [ 539.304987][ T8420] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1046'. [ 539.495360][ T4237] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 539.772133][ T4237] usb 7-1: Using ep0 maxpacket: 8 [ 540.131895][ T8425] fuse: Bad value for 'fd' [ 540.185388][ T4237] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 540.375466][ T4237] usb 7-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 540.405222][ T4237] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.461580][ T4237] usb 7-1: Product: syz [ 540.495134][ T4237] usb 7-1: Manufacturer: syz [ 540.517057][ T4237] usb 7-1: SerialNumber: syz [ 540.652366][ T4237] usb 7-1: config 0 descriptor?? [ 541.398650][ T8450] 8021q: adding VLAN 0 to HW filter on device bond1 [ 541.464486][ T4237] msi2500 7-1:0.0: Registered as swradio24 [ 541.487392][ T8450] bond0: (slave bond1): Enslaving as an active interface with an up link [ 541.565084][ T4237] msi2500 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 541.878524][ T4237] usb 7-1: USB disconnect, device number 2 [ 542.616215][ T8466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1057'. [ 542.830868][ T8454] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1054'. [ 543.142155][ T8454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 543.364938][ T8454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 543.479567][ T8454] bond0 (unregistering): (slave bond1): Releasing backup interface [ 543.566672][ T8454] bond0 (unregistering): Released all slaves [ 545.994391][ T8455] syz.0.1055 (8455): drop_caches: 2 [ 546.080880][ T8512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1070'. [ 548.771201][ T8548] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 548.838644][ T8548] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 548.862895][ T8548] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 548.920531][ T8548] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 548.970645][ T8548] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 549.064836][ T8548] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 549.095879][ T8548] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 549.162655][ T8548] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 549.276440][ T8548] device geneve2 entered promiscuous mode [ 552.586294][ T8591] syz.0.1084 (8591): drop_caches: 2 [ 553.746172][ T8602] device syzkaller0 entered promiscuous mode [ 557.916065][ T8676] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 557.933517][ T8676] device syzkaller0 entered promiscuous mode [ 558.956862][ T8687] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input7 [ 558.980890][ T8690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1110'. [ 562.619370][ T8733] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1120'. [ 562.966435][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.973222][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.679377][ T8771] syz.3.1126 (8771): drop_caches: 2 [ 570.313404][ T8843] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1140'. [ 571.065770][ T8850] syz.6.1139 (8850): drop_caches: 2 [ 579.194124][ T8903] syz.0.1153 (8903): drop_caches: 2 [ 582.015181][ T1108] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 582.265164][ T1108] usb 3-1: Using ep0 maxpacket: 8 [ 582.392273][ T1108] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 582.589607][ T1108] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 582.612086][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.649974][ T1108] usb 3-1: Product: syz [ 582.662868][ T1108] usb 3-1: Manufacturer: syz [ 582.691315][ T1108] usb 3-1: SerialNumber: syz [ 582.729949][ T1108] usb 3-1: config 0 descriptor?? [ 582.735448][ T8963] netlink: 'syz.6.1157': attribute type 72 has an invalid length. [ 582.917471][ T1108] msi2500 3-1:0.0: Registered as swradio24 [ 582.923383][ T1108] msi2500 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 583.014743][ T8974] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1163'. [ 583.310583][ T1108] usb 3-1: USB disconnect, device number 7 [ 585.165268][ T1108] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 586.055128][ T1108] usb 3-1: Using ep0 maxpacket: 32 [ 586.175340][ T1108] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 586.406285][ T1108] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 586.594695][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 586.825236][ T1108] usb 3-1: Product: syz [ 586.830601][ T9002] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1168'. [ 586.861983][ T1108] usb 3-1: Manufacturer: syz [ 586.875097][ T1108] usb 3-1: SerialNumber: syz [ 586.922506][ T1108] usb 3-1: config 0 descriptor?? [ 586.962820][ T8984] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 587.979357][ T9009] syz.6.1170 (9009): drop_caches: 2 [ 589.163282][ T1108] usb 3-1: USB disconnect, device number 8 [ 589.312245][ T9015] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1173'. [ 589.961875][ T9024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1175'. [ 593.011626][ T9045] syz.4.1181 (9045): drop_caches: 2 [ 594.199283][ T9056] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1185'. [ 596.884080][ T9074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1190'. [ 598.139146][ T9096] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1196'. [ 598.292553][ T9099] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1197'. [ 602.590518][ T9138] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1205'. [ 603.513948][ T9159] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1215'. [ 608.118352][ T9188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1224'. [ 612.530355][ T9241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1240'. [ 615.216502][ T9275] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1250'. [ 616.578235][ T9292] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1255'. [ 616.643142][ T9294] device syzkaller1 entered promiscuous mode [ 618.953645][ T9322] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1264'. [ 620.903713][ T9341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1270'. [ 623.729138][ T9363] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1277'. [ 623.973552][ T9350] device syzkaller1 entered promiscuous mode [ 624.388699][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.395117][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.518861][ T9384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1285'. [ 626.918302][ T9397] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1290'. [ 628.288675][ T9404] device syzkaller1 entered promiscuous mode [ 629.992115][ T9435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1301'. [ 631.154496][ T9445] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1305'. [ 632.622319][ T9465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1314'. [ 633.493033][ T9456] device syzkaller1 entered promiscuous mode [ 634.263160][ T9484] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1318'. [ 636.369213][ T9516] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1326'. [ 637.065662][ T9525] fuse: Bad value for 'group_id' [ 637.423800][ T9531] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1331'. [ 638.944465][ T9529] device syzkaller1 entered promiscuous mode [ 639.006002][ T9549] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1338'. [ 640.827676][ T9570] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1343'. [ 640.900133][ T9572] fuse: Bad value for 'group_id' [ 642.587193][ T9585] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1350'. [ 643.835615][ T9596] device syzkaller1 entered promiscuous mode [ 644.305643][ T9605] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1356'. [ 645.798421][ T9628] fuse: Bad value for 'group_id' [ 646.581684][ T9633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1364'. [ 648.019273][ T9649] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1369'. [ 650.569156][ T9672] device syzkaller1 entered promiscuous mode [ 652.352586][ T9692] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 652.463179][ T9692] device syzkaller0 entered promiscuous mode [ 652.550297][ T9697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1383'. [ 654.260579][ T9717] device syzkaller1 entered promiscuous mode [ 656.138475][ T9734] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 656.188146][ T9734] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 656.619604][ T9747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1394'. [ 656.999025][ T9753] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 657.080549][ T9755] device syzkaller0 entered promiscuous mode [ 657.098853][ T9753] device syzkaller0 entered promiscuous mode [ 657.265189][ T9758] device syzkaller1 entered promiscuous mode [ 658.018924][ T9769] device syzkaller0 entered promiscuous mode [ 659.450256][ T9790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1410'. [ 659.659039][ T9792] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1411'. [ 660.989250][ T9810] device syzkaller1 entered promiscuous mode [ 664.065974][ T9845] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1425'. [ 664.255289][ T23] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 664.915092][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 665.055219][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 665.345835][ T23] usb 1-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 665.357348][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.368397][ T23] usb 1-1: Product: syz [ 666.294654][ T23] usb 1-1: Manufacturer: syz [ 666.312430][ T23] usb 1-1: SerialNumber: syz [ 666.436487][ T23] usb 1-1: config 0 descriptor?? [ 668.897415][ T9887] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1436'. [ 668.929004][ T23] msi2500 1-1:0.0: Registered as swradio24 [ 668.948982][ T23] msi2500 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 669.247340][ T23] usb 1-1: USB disconnect, device number 8 [ 669.982104][ T9892] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 670.015598][ T9892] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 670.247488][ T9894] device syzkaller1 entered promiscuous mode [ 672.754708][ T9930] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1447'. [ 672.901684][ T1108] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 673.305248][ T1108] usb 3-1: Using ep0 maxpacket: 8 [ 673.490709][ T9940] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 673.539507][ T9940] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 673.546372][ T1108] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 674.605401][ T1108] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 674.650592][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.150241][ T1108] usb 3-1: Product: syz [ 675.805578][ T1108] usb 3-1: Manufacturer: syz [ 675.830076][ T1108] usb 3-1: SerialNumber: syz [ 675.871554][ T1108] usb 3-1: config 0 descriptor?? [ 675.925638][ T1108] usb 3-1: can't set config #0, error -71 [ 675.971698][ T1108] usb 3-1: USB disconnect, device number 9 [ 676.116642][ T9959] device syzkaller0 entered promiscuous mode [ 676.267205][ T9955] device syzkaller1 entered promiscuous mode [ 677.503547][ T9977] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1464'. [ 678.393180][ T9987] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 678.417694][ T9987] device syzkaller0 entered promiscuous mode [ 678.866578][T10003] fuse: Bad value for 'fd' [ 679.440360][T10007] device syzkaller1 entered promiscuous mode [ 681.186075][T10034] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1483'. [ 681.326515][T10037] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 683.443279][T10067] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 683.481530][T10067] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 683.532794][T10073] fuse: Unknown parameter 'group_i00000000000000000000' [ 683.772209][T10078] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1497'. [ 685.386700][T10089] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 685.435743][T10089] device syzkaller0 entered promiscuous mode [ 685.468015][T10095] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1500'. [ 685.838100][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.845070][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.892669][T10114] fuse: Unknown parameter 'group_id00000000000000000000' [ 687.944362][ T13] Bluetooth: hci5: command 0x0406 tx timeout [ 689.811512][T10138] device syzkaller0 entered promiscuous mode [ 691.136553][T10153] fuse: Unknown parameter 'group_id00000000000000000000' [ 692.491988][T10171] device syzkaller1 entered promiscuous mode [ 692.695047][ T4238] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 693.085186][ T4238] usb 7-1: Using ep0 maxpacket: 8 [ 693.348312][T10192] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1532'. [ 694.815502][ T4238] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 695.389915][T10203] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1534'. [ 695.406860][T10203] device vlan2 entered promiscuous mode [ 695.412475][T10203] device bridge0 entered promiscuous mode [ 695.970731][ T4238] usb 7-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 696.231951][ T4238] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.240645][ T4238] usb 7-1: Product: syz [ 696.244863][ T4238] usb 7-1: Manufacturer: syz [ 696.263493][ T4238] usb 7-1: config 0 descriptor?? [ 696.322676][ T4238] usb 7-1: can't set config #0, error -71 [ 696.329632][ T4238] usb 7-1: USB disconnect, device number 3 [ 696.618891][T10210] device syzkaller0 entered promiscuous mode [ 698.157786][T10245] device syzkaller1 entered promiscuous mode [ 700.551332][T10283] lo speed is unknown, defaulting to 1000 [ 700.732705][T10290] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 701.858253][T10304] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1558'. [ 701.959239][T10283] lo speed is unknown, defaulting to 1000 [ 703.756827][T10328] device team_slave_0 entered promiscuous mode [ 703.763477][T10328] device team_slave_1 entered promiscuous mode [ 703.823215][T10328] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 703.975422][T10328] device team_slave_0 left promiscuous mode [ 703.981639][T10328] device team_slave_1 left promiscuous mode [ 706.116168][T10345] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 706.176215][T10345] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 706.195133][T10350] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1571'. [ 707.078350][T10364] fuse: Bad value for 'fd' [ 707.532391][T10382] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 707.843993][T10366] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 708.398933][ T5325] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 708.597303][T10407] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 708.615081][T10407] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 708.665650][ T5325] usb 1-1: Using ep0 maxpacket: 8 [ 708.785368][ T5325] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 708.911637][T10410] lo speed is unknown, defaulting to 1000 [ 708.971641][T10413] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1587'. [ 708.981772][ T5325] usb 1-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 709.002084][ T5325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.027609][ T5325] usb 1-1: Product: syz [ 709.053080][ T5325] usb 1-1: Manufacturer: syz [ 709.076048][ T5325] usb 1-1: SerialNumber: syz [ 709.097374][ T5325] usb 1-1: config 0 descriptor?? [ 709.118407][T10416] fuse: Bad value for 'fd' [ 709.278207][T10420] device syzkaller0 entered promiscuous mode [ 709.316592][ T5325] msi2500 1-1:0.0: Registered as swradio24 [ 709.332674][ T5325] msi2500 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 709.515819][ T8293] usb 1-1: USB disconnect, device number 9 [ 709.742121][T10433] device syzkaller0 entered promiscuous mode [ 710.780124][T10434] fuse: Bad value for 'fd' [ 711.194153][T10449] netlink: 'syz.3.1599': attribute type 6 has an invalid length. [ 711.585182][T10449] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.1599'. [ 711.645237][T10452] fuse: Bad value for 'fd' [ 712.262798][T10462] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1605'. [ 713.215116][ T4237] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 713.805647][ T4237] usb 7-1: Using ep0 maxpacket: 8 [ 713.995298][ T4237] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 714.016316][T10484] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 714.026680][T10480] fuse: Bad value for 'fd' [ 714.204873][T10487] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1613'. [ 714.206089][ T4237] usb 7-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 714.235464][T10487] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1613'. [ 714.270751][T10490] fuse: Bad value for 'fd' [ 714.274313][ T4237] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.277952][T10487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1613'. [ 714.283368][ T4237] usb 7-1: Product: syz [ 714.283390][ T4237] usb 7-1: Manufacturer: syz [ 714.283405][ T4237] usb 7-1: SerialNumber: syz [ 714.330831][ T4237] usb 7-1: config 0 descriptor?? [ 714.385433][T10487] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 714.394212][T10487] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 714.402841][T10487] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 714.411368][T10487] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 714.440680][T10487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1613'. [ 714.526899][ T4237] msi2500 7-1:0.0: Registered as swradio24 [ 714.532983][ T4237] msi2500 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 714.772741][ T5325] usb 7-1: USB disconnect, device number 4 [ 715.443480][T10512] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1620'. [ 715.783442][T10514] netlink: 164 bytes leftover after parsing attributes in process `syz.6.1621'. [ 718.435765][T10535] fuse: Bad value for 'fd' [ 718.449583][T10538] fuse: Invalid rootmode [ 718.583917][T10539] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 719.616458][T10556] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 719.624253][T10556] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 719.946934][T10565] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1637'. [ 719.988951][T10563] device syzkaller0 entered promiscuous mode [ 720.625769][T10567] fuse: Bad value for 'fd' [ 722.078473][T10597] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 722.126804][T10597] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 722.470369][T10609] fuse: Bad value for 'fd' [ 722.949581][T10613] fuse: Invalid rootmode [ 727.258223][T10651] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 727.274164][T10651] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 727.296666][T10648] fuse: Bad value for 'fd' [ 727.492607][T10659] fuse: Unknown parameter '00000000000000000000' [ 727.941759][T10676] lo speed is unknown, defaulting to 1000 [ 727.974692][T10675] device syzkaller0 entered promiscuous mode [ 729.004439][T10695] fuse: Unknown parameter '00000000000000000000' [ 729.058373][T10694] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 729.325792][T10694] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 729.444656][T10697] fuse: Bad value for 'fd' [ 730.746273][T10716] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 731.463911][T10734] fuse: Unknown parameter '00000000000000000000' [ 731.683166][T10738] fuse: Bad value for 'fd' [ 733.664515][T10757] device syzkaller1 entered promiscuous mode [ 735.835348][T10802] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1714'. [ 735.885652][T10806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 736.443622][T10820] device dummy0 entered promiscuous mode [ 736.450378][T10820] device vlan2 entered promiscuous mode [ 736.709297][ T6145] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 736.721546][T10827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1720'. [ 736.853895][T10830] fuse: Unknown parameter 'user00000000000000000000' [ 736.969771][ T6145] usb 7-1: Using ep0 maxpacket: 8 [ 737.109733][ T6145] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 737.404430][T10836] device syzkaller0 entered promiscuous mode [ 737.827219][ T6145] usb 7-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 737.980953][ T6145] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.990146][ T6145] usb 7-1: Product: syz [ 737.994386][ T6145] usb 7-1: Manufacturer: syz [ 737.999449][ T6145] usb 7-1: SerialNumber: syz [ 738.014151][ T6145] usb 7-1: config 0 descriptor?? [ 738.211307][ T6145] msi2500 7-1:0.0: Registered as swradio24 [ 738.218115][ T6145] msi2500 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 738.326127][T10866] lo speed is unknown, defaulting to 1000 [ 738.590039][ T2240] usb 7-1: USB disconnect, device number 5 [ 738.831771][T10877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1733'. [ 738.856665][T10879] fuse: Unknown parameter 'user_i00000000000000000000' [ 739.008136][T10877] device hsr_slave_1 left promiscuous mode [ 739.280670][T10889] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 739.310329][T10889] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 739.330054][T10893] device syzkaller0 entered promiscuous mode [ 739.627493][T10898] device bridge0 entered promiscuous mode [ 739.634902][T10898] device vlan3 entered promiscuous mode [ 740.007427][T10917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1748'. [ 740.028154][T10913] fuse: Unknown parameter 'user_i00000000000000000000' [ 740.445442][ T23] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 740.745066][ T23] usb 7-1: Using ep0 maxpacket: 8 [ 740.865565][ T23] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 740.988657][T10927] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 741.030996][T10927] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 741.045717][ T23] usb 7-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 741.065098][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.073158][ T23] usb 7-1: Product: syz [ 741.120454][ T23] usb 7-1: Manufacturer: syz [ 741.140337][ T23] usb 7-1: SerialNumber: syz [ 741.153161][ T23] usb 7-1: config 0 descriptor?? [ 741.328508][ T23] msi2500 7-1:0.0: Registered as swradio24 [ 741.353773][ T23] msi2500 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 741.527771][ T2240] usb 7-1: USB disconnect, device number 6 [ 741.838554][T10931] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.846471][T10931] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.688071][T10931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 742.724567][T10931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 743.217043][T10931] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.226073][T10931] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.235406][T10931] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.244314][T10931] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.409234][T10952] lo speed is unknown, defaulting to 1000 [ 743.433711][T10955] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1758'. [ 743.508966][T10969] fuse: Unknown parameter 'user_i00000000000000000000' [ 745.376981][T10981] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 745.446012][T10985] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 745.471322][T10985] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 745.895943][T11005] fuse: Unknown parameter 'user_id00000000000000000000' [ 747.267575][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.274100][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.157195][T11046] tipc: Started in network mode [ 748.169276][T11046] tipc: Node identity fa79d171e0d1, cluster identity 4711 [ 748.204366][T11046] tipc: Enabled bearer , priority 0 [ 748.257386][T11046] tipc: Resetting bearer [ 748.290029][T11047] device syzkaller0 entered promiscuous mode [ 748.311628][T11049] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 748.320259][T11047] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 748.355332][T11049] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 748.449939][T11056] fuse: Unknown parameter 'user_id00000000000000000000' [ 748.496349][T11045] tipc: Resetting bearer [ 748.537600][T11045] tipc: Disabling bearer [ 748.657260][T11066] device syzkaller0 entered promiscuous mode [ 750.968095][T11084] device syzkaller0 entered promiscuous mode [ 751.830536][T11097] fuse: Unknown parameter 'user_id00000000000000000000' [ 752.053674][T11108] device syzkaller0 entered promiscuous mode [ 753.122646][T11120] device syzkaller0 entered promiscuous mode [ 753.856242][T11129] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1805'. [ 753.878970][T11129] device vlan2 entered promiscuous mode [ 753.904905][T11129] device bridge0 entered promiscuous mode [ 754.143806][T11131] device syzkaller0 entered promiscuous mode [ 754.165938][T11131] 0: reclassify loop, rule prio 0, protocol 700 [ 754.825390][T11100] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 755.342176][T11136] device syzkaller0 entered promiscuous mode [ 755.346768][T11139] fuse: Bad value for 'fd' [ 755.481354][T11141] device syzkaller0 entered promiscuous mode [ 755.868532][T11153] 8021q: adding VLAN 0 to HW filter on device bond1 [ 755.962195][T11166] lo speed is unknown, defaulting to 1000 [ 756.133223][T11170] device syzkaller0 entered promiscuous mode [ 756.319244][T11176] fuse: Bad value for 'fd' [ 757.181323][T11182] device syzkaller0 entered promiscuous mode [ 757.702968][T11198] netlink: 'syz.2.1827': attribute type 83 has an invalid length. [ 758.311167][T11212] device syzkaller0 entered promiscuous mode [ 758.571864][T11219] fuse: Bad value for 'fd' [ 758.588237][T11217] netlink: 'syz.6.1834': attribute type 10 has an invalid length. [ 758.639478][T11217] team0: Device vxcan1 is of different type [ 758.694997][T11220] netlink: 'syz.6.1834': attribute type 10 has an invalid length. [ 759.028015][T11220] team0: Port device dummy0 added [ 759.108852][T11217] netlink: 'syz.6.1834': attribute type 10 has an invalid length. [ 759.452271][T11217] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 759.695921][T11217] team0: Port device dummy0 removed [ 759.736116][T11217] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 760.465182][ T4232] Bluetooth: hci5: command 0x0405 tx timeout [ 760.544832][T11257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1841'. [ 761.884527][T11272] device syzkaller0 entered promiscuous mode [ 763.281210][T11292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1852'. [ 764.236585][T11298] netlink: 'syz.3.1854': attribute type 10 has an invalid length. [ 764.895263][T11310] device syzkaller0 entered promiscuous mode [ 765.863042][T11320] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 766.612368][T11326] crypto_alloc_aead failed rc=-4 [ 767.660626][T11346] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 767.684278][T11346] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 768.080005][T11354] device syzkaller0 entered promiscuous mode [ 768.888701][T11364] lo speed is unknown, defaulting to 1000 [ 769.252304][T11364] chnl_net:caif_netlink_parms(): no params data found [ 769.538241][T11375] device syzkaller0 entered promiscuous mode [ 770.042499][T11364] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.091914][T11364] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.139055][T11364] device bridge_slave_0 entered promiscuous mode [ 770.194827][T11388] netlink: 'syz.6.1879': attribute type 30 has an invalid length. [ 770.212646][T11364] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.336642][T11364] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.492378][T11364] device bridge_slave_1 entered promiscuous mode [ 770.974151][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 771.070013][T11364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 771.181324][T11364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 771.195915][T11395] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 771.213780][T11395] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 771.242616][T11391] lo speed is unknown, defaulting to 1000 [ 771.315788][T11364] team0: Port device team_slave_0 added [ 771.327185][T11399] device syzkaller0 entered promiscuous mode [ 771.359882][T11364] team0: Port device team_slave_1 added [ 771.516576][T11364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 771.536787][T11364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 771.562744][ C0] vkms_vblank_simulate: vblank timer overrun [ 771.621989][T11364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 771.662955][T11364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 771.680240][T11364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 771.773629][T11364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 771.973275][T11364] device hsr_slave_0 entered promiscuous mode [ 771.996094][T11364] device hsr_slave_1 entered promiscuous mode [ 772.002994][T11364] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 772.011126][T11364] Cannot create hsr debugfs directory [ 773.045768][ T1335] Bluetooth: hci0: command 0x041b tx timeout [ 773.122566][T11440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1890'. [ 773.248770][ T850] device hsr_slave_0 left promiscuous mode [ 773.263968][ T850] device hsr_slave_1 left promiscuous mode [ 773.283034][ T850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 773.316008][ T850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 773.423796][ T850] device bridge_slave_1 left promiscuous mode [ 773.513353][ T850] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.672675][ T850] device bridge_slave_0 left promiscuous mode [ 773.756900][ T850] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.152856][ T850] bond1 (unregistering): Released all slaves [ 774.167241][T11450] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 774.214464][T11450] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 774.580474][ T850] team0 (unregistering): Port device team_slave_1 removed [ 774.628153][ T850] team0 (unregistering): Port device team_slave_0 removed [ 774.644705][ T850] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 774.662476][ T850] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 774.771502][ T850] bond0 (unregistering): Released all slaves [ 774.844529][T11364] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 774.854663][T11364] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 774.912001][T11364] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 775.042122][T11364] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 775.068509][T11474] fuse: Unknown parameter 'fd0x0000000000000003' [ 775.105258][ T1335] Bluetooth: hci0: command 0x040f tx timeout [ 775.156921][T11472] device syzkaller0 entered promiscuous mode [ 775.483776][T11364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 775.591879][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 775.620576][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 775.658382][T11364] 8021q: adding VLAN 0 to HW filter on device team0 [ 775.717896][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 775.767469][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 775.803418][ T4262] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.810705][ T4262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 775.841909][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 775.872450][ T8438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 775.890618][ T8438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 775.913423][ T8438] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.920642][ T8438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 775.942227][ T8438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 776.029691][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 776.059154][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 776.141464][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 776.246006][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 776.277288][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 776.812729][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 777.043943][T11511] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 777.072078][T11511] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 777.113547][T11364] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 777.152484][T11364] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 777.271818][ T4237] Bluetooth: hci0: command 0x0419 tx timeout [ 777.279643][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 777.301662][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 777.337540][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 777.375783][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 777.396122][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 777.880965][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 777.898743][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 777.922533][T11364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 778.122204][T11545] device syzkaller0 entered promiscuous mode [ 778.632676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 778.652486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 778.739785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 778.806882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 778.825117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 778.864447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 778.896381][T11568] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1914'. [ 778.939576][T11568] 8021q: adding VLAN 0 to HW filter on device bond1 [ 778.952732][T11364] device veth0_vlan entered promiscuous mode [ 778.973324][T11573] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1914'. [ 779.034366][T11573] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1914'. [ 779.102757][T11575] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 779.129478][T11575] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 779.168974][T11573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 779.182931][T11573] bond1: (slave bond0): making interface the new active one [ 779.199786][T11573] bond1: (slave bond0): Enslaving as an active interface with an up link [ 779.220442][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 779.263233][T11364] device veth1_vlan entered promiscuous mode [ 779.299201][T11573] syz.6.1914 (11573) used greatest stack depth: 19312 bytes left [ 779.307943][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 779.416599][ T8464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 779.427324][ T8464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 779.465833][T11364] device veth0_macvtap entered promiscuous mode [ 779.500673][T11583] device syzkaller0 entered promiscuous mode [ 779.524093][T11364] device veth1_macvtap entered promiscuous mode [ 779.616164][T11364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 779.654961][T11364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.676824][T11364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 779.724983][T11364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.748151][T11364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 779.766384][T11364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.786622][T11364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 779.814979][T11364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.855486][T11364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 779.888263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 779.910152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 779.943081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 779.991151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 780.021500][T11364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 780.065760][T11364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.098709][T11364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 780.124616][T11364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.143702][T11364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 780.156988][T11364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.180666][T11364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 780.211605][T11364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.262718][T11364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 780.291052][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 780.303505][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 780.331870][T11364] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.360497][T11364] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.398591][T11364] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.415839][T11364] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.702876][T11622] sock: sock_set_timeout: `syz.2.1925' (pid 11622) tries to set negative timeout [ 780.735627][ T4262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 780.757729][ T4262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 780.780574][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 780.847478][T10326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 780.887858][T10326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 780.915541][ T8464] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 781.841766][T11664] tipc: Enabled bearer , priority 0 [ 781.887156][T11664] device syzkaller0 entered promiscuous mode [ 781.996072][T11663] tipc: Resetting bearer [ 782.047115][T11663] tipc: Disabling bearer [ 782.053404][T11670] sock: sock_set_timeout: `syz.0.1936' (pid 11670) tries to set negative timeout [ 782.450320][T11679] device syzkaller0 entered promiscuous mode [ 783.472093][T11696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1944'. [ 783.632243][T11703] sock: sock_set_timeout: `syz.6.1947' (pid 11703) tries to set negative timeout [ 784.120952][ T21] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 784.193401][T11726] device syzkaller0 entered promiscuous mode [ 784.385564][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 784.526011][ T21] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 784.895451][ T21] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 784.905063][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.913317][ T21] usb 4-1: Product: syz [ 784.919473][ T21] usb 4-1: Manufacturer: syz [ 784.924240][ T21] usb 4-1: SerialNumber: syz [ 784.938135][ T21] usb 4-1: config 0 descriptor?? [ 785.361656][ T21] msi2500 4-1:0.0: Registered as swradio24 [ 785.370892][ T21] msi2500 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 785.401647][T11756] device syzkaller0 entered promiscuous mode [ 785.461161][ T21] usb 4-1: USB disconnect, device number 14 [ 785.542842][T11759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1961'. [ 785.933940][T11776] device syzkaller0 entered promiscuous mode [ 786.256404][T11796] device syzkaller0 entered promiscuous mode [ 786.269432][T11794] device syzkaller0 entered promiscuous mode [ 786.282631][T11794] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 786.337581][T11794] tipc: Started in network mode [ 786.350605][T11794] tipc: Node identity ac14140f, cluster identity 4711 [ 786.359898][T11794] tipc: Enabled bearer , priority 10 [ 786.620034][T11806] lo speed is unknown, defaulting to 1000 [ 786.897102][T11813] device syzkaller0 entered promiscuous mode [ 787.272720][T11836] xt_hashlimit: size too large, truncated to 1048576 [ 787.374715][T11834] device syzkaller0 entered promiscuous mode [ 787.404146][T11841] device syzkaller0 entered promiscuous mode [ 787.423366][ T1335] tipc: Node number set to 2886997007 [ 787.888093][T11854] netlink: 'syz.3.1986': attribute type 13 has an invalid length. [ 788.070800][T11854] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 788.107526][T11854] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 788.131051][T11854] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 788.993478][T11869] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1989'. [ 789.002872][T11869] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1989'. [ 789.303664][T11855] lo speed is unknown, defaulting to 1000 [ 789.463800][T11880] device syzkaller0 entered promiscuous mode [ 790.291098][T11904] device syzkaller0 entered promiscuous mode [ 790.529114][T11909] device syzkaller0 entered promiscuous mode [ 791.777209][T11924] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2002'. [ 791.786454][T11924] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2002'. [ 793.700122][T11976] device syzkaller0 entered promiscuous mode [ 793.803469][T11979] tipc: Enabled bearer , priority 0 [ 793.813631][T11979] device syzkaller0 entered promiscuous mode [ 793.921342][T11978] tipc: Resetting bearer [ 793.991174][T11978] tipc: Disabling bearer [ 795.368391][T11996] device syzkaller0 entered promiscuous mode [ 795.625852][T11992] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2014'. [ 795.663063][T11992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 795.790103][T11992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 795.821297][T12014] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 795.848586][T12010] tipc: Enabled bearer , priority 0 [ 795.887274][T12010] device syzkaller0 entered promiscuous mode [ 795.925612][T12010] tipc: Resetting bearer [ 795.947331][T12008] tipc: Resetting bearer [ 795.979475][T12008] tipc: Disabling bearer [ 796.254053][T12033] device syzkaller0 entered promiscuous mode [ 796.262010][T12032] tipc: Enabled bearer , priority 0 [ 796.274739][T12032] device syzkaller0 entered promiscuous mode [ 796.393833][T12037] device syzkaller0 entered promiscuous mode [ 796.454050][T12031] tipc: Resetting bearer [ 796.478004][T12031] tipc: Disabling bearer [ 797.880603][T12051] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 798.165599][T12072] device syzkaller0 entered promiscuous mode [ 798.359497][T12079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2037'. [ 798.368884][T12079] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2037'. [ 798.425685][T12075] device syzkaller0 entered promiscuous mode [ 799.368398][T12087] tipc: Started in network mode [ 799.396650][T12087] tipc: Node identity 1a285679f3ef, cluster identity 4711 [ 799.416365][T12087] tipc: Enabled bearer , priority 0 [ 800.157054][T12087] tipc: Resetting bearer [ 800.341714][T12085] tipc: Disabling bearer [ 800.398488][T12105] tipc: Started in network mode [ 800.425172][T12105] tipc: Node identity ce7de8b8d85, cluster identity 4711 [ 800.432368][T12105] tipc: Enabled bearer , priority 0 [ 800.684593][T12108] device syzkaller0 entered promiscuous mode [ 800.785294][T12122] device syzkaller0 entered promiscuous mode [ 801.753535][T12104] tipc: Resetting bearer [ 801.829324][T12104] tipc: Disabling bearer [ 801.842287][ T4232] tipc: Node number set to 372107448 [ 801.888731][T12143] netlink: 'syz.0.2052': attribute type 33 has an invalid length. [ 801.897148][T12143] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2052'. [ 801.910561][T12143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2052'. [ 804.238611][T12202] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2068'. [ 804.271208][T12218] device syzkaller0 entered promiscuous mode [ 805.224497][T12262] netlink: 'syz.6.2082': attribute type 12 has an invalid length. [ 805.266432][T10965] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 805.288647][T12262] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2082'. [ 805.525133][T10965] usb 4-1: Using ep0 maxpacket: 8 [ 805.675654][T10965] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 805.920154][T12271] device syzkaller0 entered promiscuous mode [ 805.935227][T10965] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 805.951294][T10965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.998346][T10965] usb 4-1: Product: syz [ 806.018274][T10965] usb 4-1: Manufacturer: syz [ 806.036116][T10965] usb 4-1: SerialNumber: syz [ 806.057394][T10965] usb 4-1: config 0 descriptor?? [ 806.223948][T10965] msi2500 4-1:0.0: Registered as swradio24 [ 806.242514][T10965] msi2500 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 806.319803][T10965] usb 4-1: USB disconnect, device number 15 [ 806.917663][T12305] device syzkaller0 entered promiscuous mode [ 807.861112][T12349] device syzkaller0 entered promiscuous mode [ 808.489735][T12363] dummy0: Caught tx_queue_len zero misconfig [ 808.706281][T12386] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2109'. [ 808.712236][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.722621][T12386] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2109'. [ 808.734308][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.409996][T12381] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input8 [ 809.993894][T12412] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 810.115362][T12412] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 810.917127][T12432] device syzkaller0 entered promiscuous mode [ 810.933161][T12433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2120'. [ 811.252523][T12445] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2123'. [ 813.021786][T12502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2136'. [ 813.803412][T12505] device syzkaller0 entered promiscuous mode [ 813.993990][T12508] device syzkaller0 entered promiscuous mode [ 814.969374][T12557] device syzkaller0 entered promiscuous mode [ 814.977424][ T4237] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 815.365133][ T4237] usb 3-1: Using ep0 maxpacket: 32 [ 815.504135][T12570] device syzkaller0 entered promiscuous mode [ 815.515850][ T4237] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 815.881960][ T4237] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 815.904955][ T4237] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 815.913222][ T4237] usb 3-1: Product: syz [ 815.917981][ T4237] usb 3-1: Manufacturer: syz [ 815.923306][ T4237] usb 3-1: SerialNumber: syz [ 815.939347][ T4237] usb 3-1: config 0 descriptor?? [ 815.965446][T12543] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 816.103853][T12594] device syzkaller0 entered promiscuous mode [ 816.130198][T12600] netlink: 'syz.0.2163': attribute type 30 has an invalid length. [ 816.143562][T12594] 0: reclassify loop, rule prio 0, protocol 700 [ 817.736173][ T4237] usb 3-1: USB disconnect, device number 10 [ 819.297779][T12647] Illegal XDP return value 4294967274, expect packet loss! [ 819.845244][ T1335] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 820.095173][ T1335] usb 3-1: Using ep0 maxpacket: 32 [ 820.216610][ T1335] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 820.595227][ T1335] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 820.689771][ T1335] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 820.698641][ T1335] usb 3-1: Product: syz [ 820.703481][ T1335] usb 3-1: Manufacturer: syz [ 820.708715][ T1335] usb 3-1: SerialNumber: syz [ 820.918256][T12666] device syzkaller0 entered promiscuous mode [ 821.175776][ T1335] usb 3-1: config 0 descriptor?? [ 821.195324][T12655] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 821.350519][T12681] device syzkaller0 entered promiscuous mode [ 821.669415][T12696] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2191'. [ 823.240936][ T4237] usb 3-1: USB disconnect, device number 11 [ 823.529257][T12715] device syzkaller0 entered promiscuous mode [ 823.605696][T12722] device syzkaller0 entered promiscuous mode [ 824.134351][T12735] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2202'. [ 824.182139][T12731] device syzkaller0 entered promiscuous mode [ 824.298929][T12738] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2203'. [ 824.493162][T12740] bridge0: port 3(gretap0) entered disabled state [ 824.499875][T12740] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.507139][T12740] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.893424][T12753] netlink: 144 bytes leftover after parsing attributes in process `syz.6.2208'. [ 824.985416][ T4237] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 825.183647][T12759] device syzkaller0 entered promiscuous mode [ 825.255044][ T4237] usb 1-1: Using ep0 maxpacket: 32 [ 825.264440][T12761] device syzkaller0 entered promiscuous mode [ 825.375674][ T4237] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 825.376843][T12770] process 'syz.3.2213' launched '/dev/fd/-1/./file0' with NULL argv: empty string added [ 825.555622][ T4237] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 825.597043][ T4237] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 825.652047][ T4237] usb 1-1: Product: syz [ 825.681969][ T4237] usb 1-1: Manufacturer: syz [ 825.729281][ T4237] usb 1-1: SerialNumber: syz [ 825.798331][ T4237] usb 1-1: config 0 descriptor?? [ 825.852598][T12776] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2215'. [ 825.862307][T12748] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 825.935759][T12769] device syzkaller0 entered promiscuous mode [ 826.148343][T12780] device syzkaller0 entered promiscuous mode [ 826.156303][ T4237] usb 1-1: USB disconnect, device number 10 [ 827.694128][T12814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2225'. [ 828.500133][T12820] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2227'. [ 828.540556][T12820] device vlan2 entered promiscuous mode [ 828.546700][T12820] device bridge0 entered promiscuous mode [ 828.846864][T12826] device syzkaller0 entered promiscuous mode [ 829.595281][ T4232] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 830.105052][ T4232] usb 7-1: Using ep0 maxpacket: 32 [ 830.993671][T12846] device syzkaller0 entered promiscuous mode [ 831.005114][ T4232] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 831.275116][ T4232] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 831.284316][ T4232] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 831.318422][ T4232] usb 7-1: Product: syz [ 831.322658][ T4232] usb 7-1: Manufacturer: syz [ 831.333624][ T4232] usb 7-1: SerialNumber: syz [ 831.361684][ T4232] usb 7-1: config 0 descriptor?? [ 831.390978][T12829] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 831.656708][ T4232] usb 7-1: USB disconnect, device number 7 [ 831.821232][T12878] device syzkaller0 entered promiscuous mode [ 833.778382][T12901] device syzkaller0 entered promiscuous mode [ 835.183624][T12940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2257'. [ 836.093664][T12947] device syzkaller0 entered promiscuous mode [ 836.165968][T12947] 0: reclassify loop, rule prio 0, protocol 800 [ 836.388005][T12940] syz.2.2257 (12940) used greatest stack depth: 18512 bytes left [ 836.837522][T12958] device syzkaller0 entered promiscuous mode [ 836.880137][T12965] device syzkaller0 entered promiscuous mode [ 836.892973][T12965] tipc: Enabled bearer , priority 10 [ 837.599786][T12987] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2272'. [ 837.609611][T12987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 837.683248][T12987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 837.927863][T12996] device syzkaller0 entered promiscuous mode [ 837.944978][T13002] syzkaller0: refused to change device tx_queue_len [ 839.119229][T13031] tipc: Enabled bearer , priority 0 [ 839.127617][T13031] device syzkaller0 entered promiscuous mode [ 839.150789][T13031] tipc: Resetting bearer [ 839.199360][T13030] tipc: Resetting bearer [ 839.221895][T13030] tipc: Disabling bearer [ 839.403922][T13036] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2291'. [ 839.433060][T13038] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2292'. [ 839.661140][T13042] device syzkaller0 entered promiscuous mode [ 840.570018][T13068] tipc: Enabled bearer , priority 0 [ 840.592474][T13068] device syzkaller0 entered promiscuous mode [ 840.636361][T13068] tipc: Resetting bearer [ 840.655376][T13067] tipc: Resetting bearer [ 840.680465][T13067] tipc: Disabling bearer [ 840.876191][T13071] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2303'. [ 840.938298][T13073] lo speed is unknown, defaulting to 1000 [ 842.615047][ T8293] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 842.885017][ T8293] usb 3-1: Using ep0 maxpacket: 32 [ 843.005236][ T8293] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 843.326409][ T8293] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 843.336114][ T8293] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 843.344451][ T8293] usb 3-1: Product: syz [ 843.349879][ T8293] usb 3-1: Manufacturer: syz [ 843.354521][ T8293] usb 3-1: SerialNumber: syz [ 843.375388][ T8293] usb 3-1: config 0 descriptor?? [ 843.396888][T13105] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 843.762159][ T8293] usb 3-1: USB disconnect, device number 12 [ 844.723264][T13150] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 844.769584][T13150] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 845.214169][T13161] device syzkaller0 entered promiscuous mode [ 846.695216][ T13] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 846.727725][T13190] device syzkaller0 entered promiscuous mode [ 846.981162][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 847.134142][ T13] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 847.365249][ T13] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 847.374386][ T13] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 847.415071][ T13] usb 4-1: Product: syz [ 847.419452][ T13] usb 4-1: Manufacturer: syz [ 847.424138][ T13] usb 4-1: SerialNumber: syz [ 847.471309][ T13] usb 4-1: config 0 descriptor?? [ 847.522777][T13179] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 847.556936][T13214] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2342'. [ 847.918379][T13231] device syzkaller0 entered promiscuous mode [ 848.160754][T13233] lo speed is unknown, defaulting to 1000 [ 848.652632][T13248] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 848.890144][ T8293] usb 4-1: USB disconnect, device number 16 [ 848.981473][T13258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2356'. [ 849.000879][T13258] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 849.116858][T13258] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 849.157732][T13266] device syzkaller0 entered promiscuous mode [ 849.246730][T13268] device syzkaller0 entered promiscuous mode [ 849.384567][T13273] lo speed is unknown, defaulting to 1000 [ 849.655140][T13279] device syzkaller0 entered promiscuous mode [ 850.374610][T13295] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2369'. [ 850.870698][T13307] device syzkaller0 entered promiscuous mode [ 851.515238][ T8293] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 851.755203][ T8293] usb 8-1: Using ep0 maxpacket: 32 [ 851.885048][ T8293] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 852.065970][ T8293] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 852.080906][ T8293] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 852.094054][ T8293] usb 8-1: Product: syz [ 852.103325][ T8293] usb 8-1: Manufacturer: syz [ 852.109655][ T8293] usb 8-1: SerialNumber: syz [ 852.126729][ T8293] usb 8-1: config 0 descriptor?? [ 852.155374][T13318] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 852.483194][T13364] device syzkaller0 entered promiscuous mode [ 852.820152][T13375] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2394'. [ 852.868479][T13375] xt_hashlimit: size too large, truncated to 1048576 [ 852.895275][T13375] xt_hashlimit: overflow, try lower: 0/0 [ 852.942556][ T8293] usb 8-1: USB disconnect, device number 2 [ 853.121298][T13383] device syzkaller0 entered promiscuous mode [ 853.291761][T13387] device syzkaller0 entered promiscuous mode [ 853.892619][T13420] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 854.413969][T13434] device syzkaller0 entered promiscuous mode [ 855.315912][T13440] device syzkaller0 entered promiscuous mode [ 855.534109][T13450] device syzkaller0 entered promiscuous mode [ 855.692163][T13457] device syzkaller0 entered promiscuous mode [ 856.197773][T13478] device syzkaller0 entered promiscuous mode [ 856.425276][ T8293] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 856.448775][T13482] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 856.459386][T13482] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 856.514177][T13480] device syzkaller0 entered promiscuous mode [ 856.675020][ T8293] usb 4-1: Using ep0 maxpacket: 8 [ 856.795499][ T8293] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 856.814442][ T8293] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 857.000204][ T8293] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 857.885040][ T8293] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.894205][ T8293] usb 4-1: Product: syz [ 857.899969][ T8293] usb 4-1: Manufacturer: syz [ 857.904620][ T8293] usb 4-1: SerialNumber: syz [ 857.911638][ T8293] usb 4-1: config 0 descriptor?? [ 858.228368][ T8293] usb 4-1: USB disconnect, device number 17 [ 858.575530][T13512] device syzkaller0 entered promiscuous mode [ 858.925466][T13516] device syzkaller0 entered promiscuous mode [ 859.515503][T13519] device syzkaller0 entered promiscuous mode [ 859.526826][T13524] device geneve2 entered promiscuous mode [ 859.881976][T13536] lo speed is unknown, defaulting to 1000 [ 860.275641][T13545] device syzkaller0 entered promiscuous mode [ 860.292457][T13544] device syzkaller0 entered promiscuous mode [ 861.325741][T13561] device syzkaller0 entered promiscuous mode [ 861.735528][T13580] device syzkaller0 entered promiscuous mode [ 861.767715][T13582] device syzkaller0 entered promiscuous mode [ 861.908983][T13584] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.917696][T13584] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.532167][T13598] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2467'. [ 862.913177][T13610] device syzkaller0 entered promiscuous mode [ 863.401477][T13617] device syzkaller0 entered promiscuous mode [ 863.518307][T13619] device syzkaller0 entered promiscuous mode [ 865.327183][T13659] device syzkaller0 entered promiscuous mode [ 865.478294][T13665] netlink: 'syz.2.2490': attribute type 29 has an invalid length. [ 865.500225][T13665] netlink: 'syz.2.2490': attribute type 29 has an invalid length. [ 865.809502][T13665] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 866.511573][T13665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 866.522782][T13665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.534348][T13665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 866.548278][T13665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.559693][T13665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 866.570345][T13665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.581215][T13665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 866.591865][T13665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.606288][T13665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 866.616952][T13665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.711793][ T4236] lo speed is unknown, defaulting to 1000 [ 866.790995][T13687] tipc: Enabled bearer , priority 10 [ 866.811444][T13679] device syzkaller1 entered promiscuous mode [ 869.069054][T13730] misc userio: Invalid payload size [ 869.144752][T13735] device syzkaller0 entered promiscuous mode [ 869.386837][T13737] lo speed is unknown, defaulting to 1000 [ 870.150131][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.156784][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.532636][T13752] device syzkaller0 entered promiscuous mode [ 872.079358][T13773] lo speed is unknown, defaulting to 1000 [ 872.332544][T13782] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2523'. [ 873.117310][T13781] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2523'. [ 873.383525][T13795] device syzkaller0 entered promiscuous mode [ 873.913502][T13805] device syzkaller0 entered promiscuous mode [ 873.949936][T13807] tipc: Enabled bearer , priority 10 [ 874.312269][T13809] tipc: Enabled bearer , priority 0 [ 874.343030][T13809] tipc: Resetting bearer [ 874.370494][T13808] tipc: Disabling bearer [ 875.353611][ T4232] tipc: Node number set to 447271281 [ 875.545758][T13823] lo speed is unknown, defaulting to 1000 [ 876.861662][T13850] device syzkaller0 entered promiscuous mode [ 877.419035][T13865] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 877.472408][T13865] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 878.558389][T13873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2550'. [ 878.665715][T13876] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2549'. [ 878.721982][T13876] xt_hashlimit: size too large, truncated to 1048576 [ 878.759317][T13876] xt_hashlimit: overflow, try lower: 0/0 [ 879.416512][T13901] misc userio: Invalid payload size [ 879.574618][T13905] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 880.448249][T13921] tipc: Enabling of bearer rejected, failed to enable media [ 880.515348][T13919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2565'. [ 880.535354][T13919] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 880.688157][T13919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 880.843644][T13931] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 880.901947][T13931] device syzkaller0 entered promiscuous mode [ 881.140333][T13933] lo speed is unknown, defaulting to 1000 [ 881.240390][T13936] device syzkaller0 entered promiscuous mode [ 881.510316][T13946] device syzkaller0 entered promiscuous mode [ 883.297660][T13981] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 883.309623][T13985] device syzkaller0 entered promiscuous mode [ 883.336281][T13984] device syzkaller0 entered promiscuous mode [ 883.642612][T13987] device syzkaller0 entered promiscuous mode [ 883.883357][T14000] lo speed is unknown, defaulting to 1000 [ 884.050357][T14006] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.057761][T14006] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.114703][T14004] device syzkaller0 entered promiscuous mode [ 884.861254][T14031] device syzkaller0 entered promiscuous mode [ 885.167883][T14037] device syzkaller0 entered promiscuous mode [ 886.391861][T14053] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.399524][T14053] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.492096][T14061] device syzkaller0 entered promiscuous mode [ 886.600216][T14058] device syzkaller0 entered promiscuous mode [ 886.963857][T14077] sock: sock_set_timeout: `syz.2.2606' (pid 14077) tries to set negative timeout [ 887.121654][T14069] device syzkaller0 entered promiscuous mode [ 887.131233][T14075] tipc: Enabling of bearer rejected, failed to enable media [ 887.292643][T14088] ================================================================== [ 887.301289][T14088] BUG: KASAN: use-after-free in ax25_find_cb+0x175/0x3a0 [ 887.308401][T14088] Read of size 8 at addr ffff888075cadb08 by task syz.7.2608/14088 [ 887.316405][T14088] [ 887.318965][T14088] CPU: 0 PID: 14088 Comm: syz.7.2608 Not tainted syzkaller #0 [ 887.326477][T14088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 887.336595][T14088] Call Trace: [ 887.339960][T14088] [ 887.342921][T14088] dump_stack_lvl+0x188/0x250 [ 887.347733][T14088] ? show_regs_print_info+0x20/0x20 [ 887.352981][T14088] ? _printk+0xda/0x130 [ 887.357172][T14088] ? ax25_find_cb+0x175/0x3a0 [ 887.361901][T14088] ? load_image+0x400/0x400 [ 887.366447][T14088] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 887.371966][T14088] print_address_description+0x60/0x2d0 [ 887.377576][T14088] ? ax25_find_cb+0x175/0x3a0 [ 887.382300][T14088] kasan_report+0xdf/0x130 [ 887.386828][T14088] ? ax25_find_cb+0x175/0x3a0 [ 887.391549][T14088] ax25_find_cb+0x175/0x3a0 [ 887.396106][T14088] rose_transmit_link+0x169/0x730 [ 887.401190][T14088] rose_write_internal+0x680/0x1e90 [ 887.406452][T14088] ? rose_validate_nr+0x120/0x120 [ 887.411728][T14088] ? rose_route_free_lci+0x13c/0x160 [ 887.417061][T14088] ? rose_connect+0x9e1/0x13b0 [ 887.421901][T14088] rose_connect+0xada/0x13b0 [ 887.426709][T14088] ? rose_bind+0xa00/0xa00 [ 887.431183][T14088] ? aa_af_perm+0x300/0x340 [ 887.435730][T14088] ? tomoyo_socket_connect_permission+0x196/0x270 [ 887.442403][T14088] ? bpf_lsm_socket_connect+0x5/0x10 [ 887.447742][T14088] ? security_socket_connect+0x7c/0xa0 [ 887.453257][T14088] ? rose_bind+0xa00/0xa00 [ 887.457722][T14088] __sys_connect+0x3cb/0x450 [ 887.462364][T14088] ? __sys_connect_file+0x170/0x170 [ 887.467618][T14088] ? vtime_user_exit+0x2c8/0x3e0 [ 887.472611][T14088] __x64_sys_connect+0x76/0x80 [ 887.477425][T14088] do_syscall_64+0x4c/0xa0 [ 887.481893][T14088] ? clear_bhb_loop+0x30/0x80 [ 887.486615][T14088] ? clear_bhb_loop+0x30/0x80 [ 887.491338][T14088] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 887.497415][T14088] RIP: 0033:0x7f63117fe799 [ 887.501869][T14088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 887.521547][T14088] RSP: 002b:00007f630fa58028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 887.530018][T14088] RAX: ffffffffffffffda RBX: 00007f6311a77fa0 RCX: 00007f63117fe799 [ 887.538059][T14088] RDX: 000000000000001c RSI: 0000200000000240 RDI: 0000000000000004 [ 887.546162][T14088] RBP: 00007f6311894bd9 R08: 0000000000000000 R09: 0000000000000000 [ 887.554278][T14088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 887.562307][T14088] R13: 00007f6311a78038 R14: 00007f6311a77fa0 R15: 00007fffc9785ed8 [ 887.570493][T14088] [ 887.573562][T14088] [ 887.575911][T14088] Allocated by task 13905: [ 887.580362][T14088] __kasan_kmalloc+0xb5/0xf0 [ 887.584999][T14088] ax25_dev_device_up+0x50/0x580 [ 887.589988][T14088] ax25_device_event+0x483/0x4f0 [ 887.595089][T14088] raw_notifier_call_chain+0xcb/0x160 [ 887.600548][T14088] __dev_notify_flags+0x194/0x300 [ 887.605620][T14088] dev_change_flags+0xe3/0x1a0 [ 887.610439][T14088] dev_ifsioc+0x130/0xd50 [ 887.614809][T14088] dev_ioctl+0x545/0xe30 [ 887.619088][T14088] sock_do_ioctl+0x245/0x320 [ 887.623722][T14088] sock_ioctl+0x4d2/0x710 [ 887.628085][T14088] __se_sys_ioctl+0xfa/0x170 [ 887.632704][T14088] do_syscall_64+0x4c/0xa0 [ 887.637158][T14088] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 887.643093][T14088] [ 887.645446][T14088] Freed by task 14043: [ 887.649539][T14088] kasan_set_track+0x4b/0x70 [ 887.654167][T14088] kasan_set_free_info+0x1f/0x40 [ 887.659145][T14088] ____kasan_slab_free+0xd5/0x110 [ 887.664210][T14088] slab_free_freelist_hook+0xea/0x170 [ 887.669622][T14088] kfree+0xef/0x2a0 [ 887.673465][T14088] ax25_release+0x661/0x870 [ 887.678006][T14088] sock_close+0xd5/0x240 [ 887.682285][T14088] __fput+0x234/0x930 [ 887.686347][T14088] task_work_run+0x125/0x1a0 [ 887.690976][T14088] get_signal+0x1222/0x12c0 [ 887.695512][T14088] arch_do_signal_or_restart+0xe7/0x12c0 [ 887.701186][T14088] exit_to_user_mode_loop+0x9e/0x130 [ 887.706515][T14088] exit_to_user_mode_prepare+0xee/0x180 [ 887.712103][T14088] syscall_exit_to_user_mode+0x16/0x40 [ 887.717613][T14088] do_syscall_64+0x58/0xa0 [ 887.722070][T14088] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 887.728004][T14088] [ 887.730366][T14088] Last potentially related work creation: [ 887.736218][T14088] kasan_save_stack+0x35/0x60 [ 887.740938][T14088] kasan_record_aux_stack+0xb8/0x100 [ 887.746276][T14088] insert_work+0x54/0x3d0 [ 887.750653][T14088] __queue_work+0x9c5/0xd50 [ 887.755195][T14088] queue_work_on+0x124/0x1f0 [ 887.759928][T14088] netdevice_event+0x803/0x900 [ 887.764730][T14088] raw_notifier_call_chain+0xcb/0x160 [ 887.770140][T14088] call_netdevice_notifiers+0x8d/0xd0 [ 887.775557][T14088] do_setlink+0xb9d/0x3d60 [ 887.780022][T14088] rtnl_newlink+0xf8d/0x1a50 [ 887.784910][T14088] rtnetlink_rcv_msg+0x844/0xf30 [ 887.789977][T14088] netlink_rcv_skb+0x1f5/0x440 [ 887.794780][T14088] netlink_unicast+0x774/0x920 [ 887.799605][T14088] netlink_sendmsg+0x8ba/0xbe0 [ 887.804418][T14088] ____sys_sendmsg+0x5b7/0x8f0 [ 887.809230][T14088] ___sys_sendmsg+0x236/0x2e0 [ 887.813952][T14088] __sys_sendmmsg+0x2ba/0x500 [ 887.818674][T14088] __x64_sys_sendmmsg+0x9c/0xb0 [ 887.823580][T14088] do_syscall_64+0x4c/0xa0 [ 887.828100][T14088] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 887.834173][T14088] [ 887.836544][T14088] Second to last potentially related work creation: [ 887.843157][T14088] kasan_save_stack+0x35/0x60 [ 887.847893][T14088] kasan_record_aux_stack+0xb8/0x100 [ 887.853351][T14088] call_rcu+0x189/0x950 [ 887.857557][T14088] addrconf_ifdown+0x16ee/0x19c0 [ 887.862540][T14088] addrconf_notify+0x445/0xf00 [ 887.867439][T14088] raw_notifier_call_chain+0xcb/0x160 [ 887.872857][T14088] unregister_netdevice_many+0x1049/0x19f0 [ 887.878715][T14088] sit_exit_batch_net+0x4a0/0x4f0 [ 887.883907][T14088] cleanup_net+0x791/0xba0 [ 887.888373][T14088] process_one_work+0x85f/0x1010 [ 887.893352][T14088] worker_thread+0xaa6/0x1290 [ 887.898110][T14088] kthread+0x436/0x520 [ 887.902324][T14088] ret_from_fork+0x1f/0x30 [ 887.906785][T14088] [ 887.909134][T14088] The buggy address belongs to the object at ffff888075cadb00 [ 887.909134][T14088] which belongs to the cache kmalloc-192 of size 192 [ 887.923317][T14088] The buggy address is located 8 bytes inside of [ 887.923317][T14088] 192-byte region [ffff888075cadb00, ffff888075cadbc0) [ 887.936466][T14088] The buggy address belongs to the page: [ 887.942128][T14088] page:ffffea0001d72b40 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x75cad [ 887.952329][T14088] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 887.959941][T14088] raw: 00fff00000000200 ffffea0000815480 0000000500000005 ffff888016c41a00 [ 887.968565][T14088] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 887.977178][T14088] page dumped because: kasan: bad access detected [ 887.983664][T14088] page_owner tracks the page as allocated [ 887.989411][T14088] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4190, ts 773474170010, free_ts 773459263108 [ 888.005608][T14088] get_page_from_freelist+0x1bbd/0x1ca0 [ 888.011200][T14088] __alloc_pages+0x1ee/0x480 [ 888.015836][T14088] new_slab+0xb6/0x4b0 [ 888.019942][T14088] ___slab_alloc+0x80a/0xdd0 [ 888.024568][T14088] __kmalloc_node+0x200/0x3b0 [ 888.029279][T14088] memcg_alloc_page_obj_cgroups+0x81/0x120 [ 888.035130][T14088] slab_post_alloc_hook+0xba/0x380 [ 888.040800][T14088] kmem_cache_alloc+0x100/0x290 [ 888.045696][T14088] copy_signal+0x50/0x640 [ 888.050073][T14088] copy_process+0x178b/0x3e20 [ 888.054842][T14088] kernel_clone+0x23f/0x990 [ 888.059382][T14088] __x64_sys_clone+0x19a/0x210 [ 888.064273][T14088] do_syscall_64+0x4c/0xa0 [ 888.068735][T14088] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 888.074685][T14088] page last free stack trace: [ 888.079526][T14088] free_unref_page_prepare+0x637/0x6c0 [ 888.085040][T14088] free_unref_page+0x8f/0x2a0 [ 888.089767][T14088] __vunmap+0x8b9/0xa50 [ 888.093978][T14088] __do_replace+0x85b/0x9c0 [ 888.098519][T14088] do_ip6t_set_ctl+0xaaa/0xd90 [ 888.103331][T14088] nf_setsockopt+0x25f/0x280 [ 888.108005][T14088] ipv6_setsockopt+0x2086/0x3cc0 [ 888.113009][T14088] tcp_setsockopt+0x240/0x1e90 [ 888.117813][T14088] __sys_setsockopt+0x2bf/0x3d0 [ 888.122711][T14088] __x64_sys_setsockopt+0xb1/0xc0 [ 888.127812][T14088] do_syscall_64+0x4c/0xa0 [ 888.132275][T14088] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 888.138331][T14088] [ 888.140806][T14088] Memory state around the buggy address: [ 888.146473][T14088] ffff888075cada00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 888.154706][T14088] ffff888075cada80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 888.162896][T14088] >ffff888075cadb00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 888.170989][T14088] ^ [ 888.175355][T14088] ffff888075cadb80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 888.183625][T14088] ffff888075cadc00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 888.191714][T14088] ================================================================== [ 888.199807][T14088] Disabling lock debugging due to kernel taint [ 888.206174][T14088] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 888.213399][T14088] CPU: 0 PID: 14088 Comm: syz.7.2608 Tainted: G B syzkaller #0 [ 888.222367][T14088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 888.232462][T14088] Call Trace: [ 888.235780][T14088] [ 888.238740][T14088] dump_stack_lvl+0x188/0x250 [ 888.243457][T14088] ? show_regs_print_info+0x20/0x20 [ 888.248699][T14088] ? load_image+0x400/0x400 [ 888.253244][T14088] panic+0x2e5/0x810 [ 888.257177][T14088] ? asm_common_interrupt+0x22/0x40 [ 888.262439][T14088] ? bpf_jit_dump+0xd0/0xd0 [ 888.267004][T14088] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 888.273196][T14088] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 888.279138][T14088] ? _raw_spin_unlock+0x40/0x40 [ 888.284133][T14088] ? ax25_find_cb+0x175/0x3a0 [ 888.288852][T14088] check_panic_on_warn+0x80/0xa0 [ 888.293836][T14088] ? ax25_find_cb+0x175/0x3a0 [ 888.298548][T14088] end_report+0x6d/0xf0 [ 888.302747][T14088] kasan_report+0x102/0x130 [ 888.307291][T14088] ? ax25_find_cb+0x175/0x3a0 [ 888.312013][T14088] ax25_find_cb+0x175/0x3a0 [ 888.316568][T14088] rose_transmit_link+0x169/0x730 [ 888.321638][T14088] rose_write_internal+0x680/0x1e90 [ 888.326878][T14088] ? rose_validate_nr+0x120/0x120 [ 888.331950][T14088] ? rose_route_free_lci+0x13c/0x160 [ 888.337281][T14088] ? rose_connect+0x9e1/0x13b0 [ 888.342117][T14088] rose_connect+0xada/0x13b0 [ 888.346875][T14088] ? rose_bind+0xa00/0xa00 [ 888.351330][T14088] ? aa_af_perm+0x300/0x340 [ 888.355974][T14088] ? tomoyo_socket_connect_permission+0x196/0x270 [ 888.362441][T14088] ? bpf_lsm_socket_connect+0x5/0x10 [ 888.367859][T14088] ? security_socket_connect+0x7c/0xa0 [ 888.373365][T14088] ? rose_bind+0xa00/0xa00 [ 888.377830][T14088] __sys_connect+0x3cb/0x450 [ 888.382460][T14088] ? __sys_connect_file+0x170/0x170 [ 888.387709][T14088] ? vtime_user_exit+0x2c8/0x3e0 [ 888.392681][T14088] __x64_sys_connect+0x76/0x80 [ 888.397481][T14088] do_syscall_64+0x4c/0xa0 [ 888.401936][T14088] ? clear_bhb_loop+0x30/0x80 [ 888.406685][T14088] ? clear_bhb_loop+0x30/0x80 [ 888.411395][T14088] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 888.417348][T14088] RIP: 0033:0x7f63117fe799 [ 888.421796][T14088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 888.441432][T14088] RSP: 002b:00007f630fa58028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 888.449894][T14088] RAX: ffffffffffffffda RBX: 00007f6311a77fa0 RCX: 00007f63117fe799 [ 888.457908][T14088] RDX: 000000000000001c RSI: 0000200000000240 RDI: 0000000000000004 [ 888.465917][T14088] RBP: 00007f6311894bd9 R08: 0000000000000000 R09: 0000000000000000 [ 888.473927][T14088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 888.481934][T14088] R13: 00007f6311a78038 R14: 00007f6311a77fa0 R15: 00007fffc9785ed8 [ 888.489950][T14088] [ 888.493336][T14088] Kernel Offset: disabled [ 888.500325][T14088] Rebooting in 86400 seconds..